News - 2003

The bulletins were written and distributed by Yehavi Bourvine.

News bulletin #204
7 -December-2003

013Barak special deal for university users

We would like to inform you of a  new  Internet  service,  offered  by 013Barak,  as  well  as of changes in the Internet service offered by HUJI.

For many years, HUJI has provided an Internet service to its  academic staff   and   graduate  students.   The  service  was  also  available informally and on a temporary  basis  to  undergraduate  students  and administrative staff.

The following temporary and informal access options are  being  phased out:

• Connection to HUJI through 1346680 will  permanently  end  on  March 1st, 2004.
• As of October 1st 2004, connection to HUJI through  ADSL/cable/modem will  remain  open  ONLY  to academic staff, graduate students, and authorized administrative staff.

The new offer by 013Barak includes:

• An Internet service (ADSL/cable/modem), which is open  to  all  HUJI staff and students.
• A Barak Mailbox (as well as access to existing HUJI mailboxes).
• Telephone support.
• There are no  restrictions  regarding  non-academic  activities  (in contrast to HUJI's Internet service which is designated for academic purposes and prohibits various activities).
• 013Barak provides access to the academic journals and databases that are jointly subscribed by the universities in Israel, like some resources in MALMAD, in addition for all the rest of their connection services. Note that journals and databases that are accesses through HUJI's libraries require either a direct connection to HUJI, or VPN Client. (more  info at: http://ca.huji.ac.il/services/internet/connect/vpnra/vpnra.shtml). OTP cards will be available soon in Academon on all 4 campuses.
  
  For more information you may contact 013Barak, tel.  1-800-013-013.
  Note:
    - It is always recommended to check  offers  by  alternative  Internet
      service providers (ISP) before concluding a deal.
    - Customers of alternative ISPs will need an OTP card to access any of
      the academic journals and databases mentioned above.
  

HELPDESK numbers:
HUJI HELPDESK -  (02-58)83450  (8:00-18:00) (02-65)85555 (09:30-20:00)
Rachel -  (08-94)89283 (09:00-15:00)

Barak's advertisement (http://ca.huji.ac.il/bf/barak.pdf)

News bulletin #203
30 -November-2003

New software at the MicroShop:

1. Office 2003 is now available on Pro (64$) and Standard (54$) versions. Customers who bought Office after 10/09/03 don't need to buy a new license and can receive the CD for 5$ by showing their
   license. System requirements for Office system are: Microsoft Windows(r) 2000 with Service Pack 3 (SP3) or later; or Windows XP.
2. Maple version 9 is now available (80$). For more information, please call Naama or Yael at 84069/85777 or see our WEB page at http://ca.huji.ac.il/services/software/microshop.shtml

Our virus warning policy:

Due to the increasing number of machines infected by Viruses, we had to find a way to track machines that spread viruses, attempt to hack other machines, etc. As we do not have a network-wide virus scanner, and as there is no perfect antivirus software (they all fail to spot some virus or another), we decided to watch for anomalies caused by the viruses. We can detect anomalies in computers which are generating numerous connections in parallel. During normal usage your PC should create less than 10 concurrent connections; thus, we search for computers which create dozens and hundreds of connections IN PARALLEL. Owners of such computers who access us via the remote access systems (dialup, ADSL, cables) receive a warning message and blocked if not taking care of their computer. Note that we do not check the exact cause of this behavior to avoid invasion of your privacy. Once in a while we get a reply "I've formatted my computer thus it is clean now"; this is a misconception. When you install a computer from scratch, you install the original version of the operating system with all the initial bugs that were detected and exploited since then. Thus your computer will get infected shortly after being connected to the network. You must install all the necessary patches before re-connecting it (a CD with the patches can be obtained from your computer branch). Check for latest antivirus updates and instructions for dealing with viruses and protecting your computer at http://ca.huji.ac.il

News bulletin #202
23 -October-2003

• Dial-in accounts: According to University's policy, accounts are strictly personal, and users should not provide the details of their account to anyone. The accounts are granted for academic purposes to HUJI's members only and not for use by their family members. Our support staff will assist only the owners of the accounts.
• SPAM mail: In addition to being a nuisance, SPAM mail costs HUJI a lot of money in lost worker productivity, disk space at the mail servers and backup servers, software and hardware counter-measures, and wasted bandwidth. It has become an increasing problem to users as well as system administrators who try to minimize the damages of the phenomenon. Users who will spread SPAM mail through University's facilities or accounts will have their account disabled.
• Internet Radio: It is very common among audio applications to include a feature of connecting to radio stations via the Internet. You are urged to minimize the use of this option and find alternative "old fashioned" ways of listening to the radio. The network is not an exchange for a radio, and listening to radio via the net costs the University a lot in traffic, at the expense of important academic activities.
• Wireless LAN at home: We would like to warn users who installed wireless LAN at home of the security risks associated with this technology. Please be aware that your neighbors might use your connection. You will be held responsible for any malicious usage that might be carried out through your network, even if you are unaware of these activities.

News bulletin #201
21 -September-2003

Change of mail settings from 29/9/03

outmail.huji.ac.il - Scanning outgoing mail for viruse

As of the 29th, September all outgoing mail will pass ONLY through our mail
gateway: outmail.huji.ac.il.

Your mail client (Outlook Express, Eudora, Netsacpe, etc.) should be
reconfigured, otherwise you won't be able to send mail at all. The
reason for the change is to force every mail message to be scanned for
viruses and thus blocking viruses sent by home users.
The reconfiguration involves changing the SMTP or Outgoing mail in
the client to: outmail.huji.ac.il. Note that the outgoing mail
server can be different from the incoming mail server, and you need to
change ONLY the outgoing server.
For detailed explanations of how to configure each mail client please
see http://ca.huji.ac.il/services/internet/mail/outmail.shtml

For help please call our helpdesk at 02-6585555, 02-5883450.

New Critical Microsoft Updates -
Protect your computer from viruses

There are new and very serious virus threats . In order to protect your PC
and PREVENT IT FROM BEING DISCONNECTED FROM HUJI'S NETWORK, please follow our instructions:

1) WINDOWS updates

2) Internet Explorer 5.0.1, 5.5, 6:
Download and run Internet Explorer new security update for Windows (issued 3/10/03) from our site: http://secinfo.huji.ac.il/bulletins/ms03-040.htm

3) OFFICE 97, 2000, XP USERS
Update your Microsoft office. Use the link from our site [NOTE: Don't begin the update if you don't have the original Office installation CD at hand. If you don't complete the update process, your Office might be damaged]:

http://secinfo.huji.ac.il/bulletins/officeupdate.htm

Installation notes:

1. If you didn't update regularly your Office, the update process might
   require to download and to install former service packs which are quite
   large. If you are unable to download the service packs to your home
   computer, you will be able to get a CD which contains them. Install the
   service packs and get back to the security update through our site. The CD
   can be obtained via our Support centers (02-6585555, 02-5883450) and
   branches (and will be available soon) .
2. During the update process you will be asked to insert your original
   installation CD (at this point write down the office version that is
   required). If you have a license for your product but lost the CD, contact
   the Microshop: naamak@savion.cc.huji.ac.il, tamara@savion.cc.huji.ac.il,
   6584217. You will be able to purchase the CD ($5) if your Office version is
   available at the Microshop . If you've lost your license as well, you will
   have to purchase a new license + CD (Ramah3 customers at Mt. Scopus who
   purchased an Office license should contact the system team at 81025).

3) ALL WINDOWS USERS
Check daily for Symantec definition files in our site: http://ca.huji.ac.il (Symantec publishes live updates only weekly – our site publishes updates more frequently).

4)  outmail.huji.ac.il
All HUJI users should change the settings of their "outgoing" mail clients to the above address. In the near future this will be the only way to send mail from a personal mail client. When mail is sent via outmail.huji.ac.il, it is first checked for viruses so that HUJI users cannot send viruses out to their e-mail contacts.
Please follow our guides in the site below and make the necessary changes.
http://ca.huji.ac.il/services/internet/mail/outmail.shtml

News bulletin #199
2 -September-2003

SMTP server for PC mail clients: You are advised to re-configure your
mail client (Outlook Express, Eudora, Netscape, etc.) to use
outmail.huji.ac.il as your SMTP server. SMTP server is the server
through which you send the outgoing mail and is called in most PC mail
clients as "SMTP server" or "outgoing mail server". Note that the
outgoing mail server can be different from the incoming mail server,
and you need to change ONLY the outgoing server.
In the near future we'll block outgoing mail access to all other
servers, so you'll be able to send outgoing mail only via
outmail.huji.ac.il. A message will be sent before this change. We
therefore encourage you to change the configuration now and not delay
it.
For detailed explanations of how to configure each mail client please
see http://ca.huji.ac.il/services/internet/mail/outmail.shtml
The reason for doing this is to force every mail item to be scanned
for virus and thus blocking viruses sent by home users.
For help please call our helpdesk at 02-6585555, 02-5883450.

EndNote software: The MicroShop is trying to arrange a collective purchase of EndNote
software kits (version 6 for Mac and version 7 for PC). The price is
236$ per full kit. The selling will take place only if at least 10
people place order. If you are interested, please fill the order form
at http://ca.huji.ac.il/services/software/microshop.shtml and mail to
naamak@savion.huji.ac.il or fax 6586607. We will update you on the
ordering status. For more info please call Naama/Yael 84069

News bulletin #196-197
15 August- 2 September 2003

The latest virus attack

1. Cleaning an infected computer

2. CD distribution - If your computer / account is blocked to communication, you can obtain a CD with all needed tools and patches from any brach of the Authority of Computation.
   
   
3. Update your virus definitions on a daily basis. Please download the latest definition from our home page (http://ca.huji.ac.il)
   
   
4. Scan your outgoing mail for viruses. (http://ca.huji.ac.il/services/internet/mail/outmail.shtml)
   
   
5. Deleted suspicious messages. More info about mass-mailing viruses.
   
   
6. Change the default Administrator password of your computer to a meaningfull one
   
   
7. Update the latest Microsoft Security patches (http://secinfo.huji.ac.il/bulletins/ms03-039.htm)
   
   
8. Support: Call 6585555, 5883450
   
   
9. More info on available tools (http://ca.huji.ac.il/services/viruses/fix.shtml)

More Viruses

  1.W32.Sobig.F@mm - is a mass-mailing, network-aware worm
   2.W32.Dumaru@mm, W32.Squirm@mm - new worms that send email From "Microsoft"

1.W32.Sobig.F@mm - is a mass-mailing, network-aware worm.
  T he worm  sends itself via email to all the email addresses it finds. The mail  arrives from any user and has one of the following subjects:

Re: Details
Re: Approved
Re: My details
Re: Thank you!
Re: That movie
Re: Wicked screensaver
Re: Your application
Thank you!
Your details

 the body of message in the format of :
" See the attached file for details " or "Please see the attached file for details".  The virus is attached in different file names,Double clicking the file activated the virus.

our mail server CLEANS  the attached file from the virus, hence the attached file shouldn't contain the virus itself.
recommendations:

1. Do not open the messages with one of the subjects a head.
2. Permanently delete all those mails ( remove them from the deleted items , too)
3.  Make sure your Norton antivirus is updated. Please download the last update (http://ca.huji.ac.il)
4.Run a full system scan and delete all the files detected as viruses..
   If you still got the virus through other ISP :The Sobig.f worm activates only when a user double clicks on the attached file. 
  Symantec Security Response has developed a removal tool to clean the infections of W32.Sobig.F@mm :
http://ca.huji.ac.il/services/software/FixSbigF.exe
       


   2.In last days were discovered a number of new worms ( W32.Dumaru@mm, W32.Squirm@mm ) that send email
   From: "Microsoft" <security@microsoft.com> or From: support@microsoft.com
   with attachment contains "microsoft" patch.
   Subject:Use this patch immediately ! or Subject:Microsoft Security Bulletin
   please pay attention: Microsoft never distributes software directly through e-mail
   If you receive an e-mail that claims to contain software from Microsoft, do not run the attachment.
   The safest course of action is to delete the mail altogether  

Due to the mass virus attacks lately we strongly recommend to update your virus definitions on a daily basis , and to delete each mail from unknown sender.  
During the vacation the support center is operational for virus problems  between 08:00-18:00 on 6585555

News bulletin #196
15 -August-2003

The latest virus attack

As you probably heard on the news, there is a new worm (w32.blaster.worm). It infects only windows NT/2000/2003/XP.
Following the latest spread of computer viruses and the appearance of new ones, we are disconnecting from the network infected machines, both on campus and through remote access. We are preparing instructions for handling the new viruses and we ask you to follow the authority's web-site news and our e-mail announcements. Please shutdown computers that are not needed during the vacation, to minimize the risks of infection. During the vacation our hot-line will be operational between 08:00-18:00 on 6585555.

• Symptoms: The system sends an error message about RPC service failure and may reboot the machine repeatedly
  
  
• Preventing your system from restarting (for WinXP/2003 only):
  • Go to Start-->Run and type: shutdown -a
    
    
• Fixes:
  • Step 1- Update your windows with Microsoft's security patch from: http://ca.huji.ac.il/news/security.shtml NOTE: If you are unable to install the update - start with Step 2 and then get back to Step 1.
  • Step 2- Download and run Symantec's fix tool (version 1.0.4, 15/8/03) from: http://ca.huji.ac.il/helpdesk/FixBlast.exe
    
  • Note for XP users:
    Before using the fix tool, XP users should disable System Restore:
    1. Right-click My Computer, and then click Properties.
    2. Click the System Restore tab
    3. Check Turn off System Restore or Turn off System Restore on all drives
    
    After the tool operation completes successfully, XP users may restart System Restore:
    
    1. Right-click My Computer, and then click Properties.
    2. Click the System Restore tab.
    3. Uncheck Turn off System Restore or Turn off System Restore on all drives
    
    
• Prevention: Make sure your Norton antivirus is updated. Please download the last update (http://http://ca.huji.ac.il)
  
• Further Recommended step: Manually disabling DCOM
  
  1. Go to Start->Run. Type: Dcomcnfg.exe.

     (Windows XP / Windows Server 2003 additional steps):
     * Click on the Component Services node under Console Root.
     * Open the Computers sub-folder.
     * Right click on My Computer and choose Properties.

  2. Choose the Default Properties tab.
  3. Clear the Enable Distributed COM on this Computer check box.
  4. Click OK to apply the changes and exit Dcomcnfg.exe.
     
     
• More information about the Worm: http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html
  
  
• Support: If you need further help, please contact our helpdesk: 6585555, 5883450

News bulletin #195
27 -july-2003

• Microshop announcement: Adobe Illustrator 10
  Adobe illustrator: Adobe illustrator 10 (English version) is now being sold in the MicroShop. The price is 122$, you can find the order form at: http://ca.huji.ac.il/services/software/microshop.shtml.
  For those of you who are interested in buying Adobe products (Acrobat, PhotoShop, illustrator), We advise you to make your order before the end of the month since the price is expected to increase dramatically. You can find the price list and order form at the above URL.

News bulletin #194
7 -july-2003

• Sharing of copyrighted material over the Internet:
  The following letter was sent by the American recording industry association to copyright violators :
  "It appears that you are offering copyrighted music to others from your computer. Distributing or downloading copyrighted music on the Internet without permission from the copyright owner is ILLEGAL. It hurts songwriters who create and musicians who perform the music you love, and all the other people who bring you music. When you break the law, you risk legal penalties. There is a simple way to avoid that risk: DON'T STEAL MUSIC, either by offering it to others to copy or downloading it on a "file-sharing" system like this. When you offer music on these systems, you are not anonymous and you can easily be identified. You also may have unlocked and exposed your computer and your private files to anyone on the Internet. Don't take these chances. Disable the share feature or uninstall your "file-sharing" software." We advise all university students and staff members who engage in distribution of copyrighted material to follow the advise of the letter and to cease from file sharing and distribution.
  
• Workshop on Advanced Word (styles):
  When: July14 and July 21th , 2:00 - 3:30 pm
  Where: Computer Room, Third floor of Dean's Building, Medical school
  From: The Computation Authority, Ein Karem Branch
  Hebrew University researchers are invited to a workshop on advanced Word techniques. This workshop, which will be given in English, will focus on the use of styles, a set of Word commands which is extremely useful for creating documents. For example, styles allow you to easily format long documents, include numbered footnotes, number tables, and produce automatic lists of tables. This set of techniques is a great time-saver for those who prepare manuscripts for publication or grant proposals. The workshop originally took place in May and is being given again due to popular request. The dates are July 14th and July 21rst, and the place is the Computer Room on the third floor of the Dean's Building. In order to register, you need to send Email to Leah Rosen at lrosen@vms.huji.ac.il. Please include your name, department, phone number, and the date of the seminar which you would like to attend. The first fifteen people to respond for each date will be enrolled in the workshop. Participants are asked to bring a document on a diskette to be used for personal practice during the workshop. There is no charge for the workshop.
  
• World-wide roaming service offered by Golden Lines:
  Golden lines are offering a service for internet access worldwide, which allows you to access the internet anywhere by dialling a local number. The service is given directly by them without any responsibility of the university. For details you can call the sales rep for the university: Orit Hadad 052-996099.

News bulletin #193a
1-jun-2003

• VPN services: This is a new service which is now available to our users. VPN allows you to connect to the Internet via any provider and then connect to the university, get a university IP address and access all the information databases which are accessible from within the campus.
  This service is intended for those who are staying abroad or for those who cannot dial our modems and need (and are authorized to use) library information services.
  In order to use VPN you must have an OTP card. If you do not have one yet, please contact the following people:
  
  • Edmond J. Safra Campus: Ayeleth Hashachar Drori, 84475.
  • Mt. Scopus: Rachel Polatov, 83072.
  • Ein Karem: Michal Vaalani, 87044.
  • Rehovot: Rachel Moshe, 89283

  For more details and usage instructions please see
  http://ca.huji.ac.il/services/internet/connect/vpnra/vpnra.shtml

• Mass Emails: recently we see an increase of mail sent to large distribution lists which contains huge attachments. This causes various problems (cloging the mail system, hanging users connecting via dialup, etc.). Thus, users who send mass Emails are requested to not append attachments to it; instead please place your information on a WEB page and send only a link to it.

• HUJIvms outage on Wednsday 4/6/2003: HUJIvms will be down from about 16:00 for three hours for maintenance of the power system.

News bulletin #193
15 April 2003

• HUJIvms shutdown for maintenance: HUJIvms will be down on Sunday
  20/4/2003 for a few hours for disk maintenance.
• Cables registration change: In order to register for cables
  connection please call the helpdesk at 02-6585555.
• Star Office 6 for PC: The English version of Star Office 6 for PC
  (Hebrew is not supported) is now available free of charge to all
  University Staff members. Instructions on downloading and
  installation may be found on
  http://pc.huji.ac.il/ftp/applications.shtml
• PhotoShop 7 for PC/Mac is now available thro the MicroShop. You can
  view the price list and download the order form from
  http://ca.huji.ac.il/services/software/microshop.shtml

News bulletin #192
23 -March-2003

• Cables Internet connection - Update
  We would like to remind you that Internet access rates are available only inside the same dialing area; i.e. you can have Internet access rates for our Jerusalem modems only if you aredialing within the 02 area (and have registered for Internet rates with the registered number via 199 or Bezeq's site). We are working on having 1346-680 as an Internet number as well.
• 136680 dialin number changes to 1346680
  Bezeq is changing the 136 numbers from 6 digits to 7 digits. Hence, users who call 136680 should now dial 1346680. Both numbers will function until the end of the year.
• Flaw in Windows Script Engine Could Allow Code Execution (814078)
  This flaw affects all Windows systems version 98 and above. A flaw exists in the way by which the Windows Script Engine for JScript processes information. An attacker could exploit the vulnerability by constructing a web page that, when visited by the user, would execute code of the attacker's choice with the user's privileges. The web page could be hosted on a web site, or sent directly to the user in email. This flaw is considered critical and it is recommended that all windows users enter http://www.windowsupdate.com to obtain the patch to fix this security flaw and obtain other security updates as well.

News bulletin #191
30-January-2003

• Cables Internet connection - Update
  In the previous news bulletin we've asked users, who wish to connect via Arutzei Zahav, to call them directly. However, Arutzei Zahav decided they don't want users to contact them directly but instead they rather receive the details through us. Hence, anyone who wants to connect should send the following details to yehavi@vms.huji.ac.il (that is until we have an automated system):
  - Full name of the cables connection owner.
  - ID number.
  - Full address.
  - Phone number by which the cables company identifies you.
  - Phone number for coordination.
  - The speed of connection you want.
  - The number of computers to connect.
  
  If you are already connected please send these details also so they can get their records straighten out.
  
  
• Licences for Mac Os X
  • We are about to receive any day now licences for Mac Os X. Price - $76 including CDs. If you need to upgrade your classic environment as well, you can purchase a bundle - Mac Os X + System 9.2.2 for $90 (CDs included). For further details please call Naama or Johanna at 84069.You can download
  • guides for these Operating Systems:
    Mac Os X - http://ca.huji.ac.il/helpdesk/macosx.pdf
    Mac Os 9 - http://ca.huji.ac.il/helpdesk/MacCourse.pdf

News bulletin #190
15-January-2003

• Cables Internet connection
  We are now connected to the cables companies and can supply Internet services through them. Connecting to the university with cables (after the cable modem is installed) is similar in all companies (using a VPN dialer), but the registration process varies among the companies:
  • Arutzei Zahav: You call them and ask to install a cable modem for internet without being associated with an ISP (called "cold installation").
  • Matav: The users have to register at the ISP (the university in this case) who will send their details to the ISP asking for cable modem installation (the usage after the installation is via VPN dialer). The registration is currently being manual (until we deploy an automated system). In order to have the service (and ONLY IF YOUR CABLE OPERATOR IS MATAV) Please send the following details to yehavi@vms.huji.ac.il: Full name, address, I.D. number, phone number (which identifies you at the cables), the date when you got connected to the cables, the bandwidth you want and how many sockets you need. For the available packages please see the WEB page of the cables company.
  • Tevel: Will probably be the same as Arutzei Zahav, but will be available only in 2-3 weeks. After you have the modem installed you dial to the university with a special dialer. For information of defining the dialer please see http://www.cables.org.il (select "vpn dialer" section). Note that this is the same dialer as used for ADSL, but the parameters are different. The required parameters are:
    
    VPN server (or host): vpn.huji.ac.il
    Username: The username as you use at the modems (i.e. user%host)
    Password: Your password.

News bulletin #189
12-January-2003

• Visual C++.net
  The microshop is offering for sale Visual C++.net standard kits. Compatibility: win 2000 and up. Price: 68$. There is only a limited amount of kits available. For more details please call Naama or Johanna 65-84069
  
  
• As of today, HUJIvms is running now on a new server
  

News bulletin #188
7-January-2003

• SSH
  Secure Shell is a program to log into another computer over a network, to execute commands in a remote machine, and to move files from one machine to another. It provides strong authentication and secure communications over unsecured channels. It is intended as a replacement for telnet, rlogin, rsh, rcp and ftp. Most of our servers already support SSH, and some (for example gene.huji.ac.il) have already disabled Telnet and ftp access. For your convenience there is a new page with information, guides and downloads for SSH:
  http://ca.huji.ac.il/services/internet/ssh/ssh.shtml
  
  
• Mac Os X Seminar
  As an increasing amount of users take interest in Mac Os X (the new Unix based operating system for apple computers), and due to the fact that future computers will probably primarily boot from this new system, we've asked Yeda (Apple's representatives in Israel) to organizes an introductory course on Mac Os X for the benefit of HUJI's users. Following you'll find the invitation. Please register if you wish to participate.
  -------------------------
  Dear Mac User
  We have the pleasure of inviting you to Yeda's Seminar - Mac OS X.
  The Seminar will take place at the Hebrew University, Edmond J. Safra Campus,
  Belgium House Faculty Club, on 14.1.03 from 9:30 - 13:00.
  Agenda:
  9:30 - 10:00 Gathering Refreshments.
  10:00 - 13:00
  1. Why Move to Mac OS X ?
  - The advantages of Mac OS X.
  - Mac OS X as a scientific tool.
  - More research applications.
  - Compatibility to a wider working environment.
  2. Mac OS X Basic features:
  - User Interface.
  - Classic (Mac OS 9) working environment.
  - Built-in Software Applications.
  Yeda Computers
  Tel : 03-9005347 Fax : 03-9026985
  E-Mail : hagits@yeda.co.il

.
Last update, 8/12/03

The Authority for Computation, Communication & Information
Copyright ©, The Hebrew University of Jerusalem. All Rights Reserved

Sitemap

Webmaster