Socket security layer for 8330 curve

With no warning my company added socket security layering on our e-mail exchange server.  Now all of us with blackberries cannot receive our mail on our phone.  I have a 8330 curve.  I'm not able to figure out if there is a setting for this.  Please help!

    Hi Mike8330!
I'm sorry to learn of these error messages! Let's get to the bottom of this, OK? You have "8330" in your screen name, so I'm assuming you have the Curve 8330?  I did a little research on the error code you're receiving, and I recommend a master reset of the device, so the error code goes away. Here are the steps:
http://vz.to/19ILeEB
Please let me know how this goes for you, I'd like to make sure you're no longer having this issue.
Have you checked out the new Blackberry devices we offer? Ready to upgrade? Just dial #UPG send to check your upgrade eligibilty. Check out our line up here: vzw.com/products
Thank You,
ChristinaB_VZW
VZW Support
Follow us on Twitter @VZWSupport

Similar Messages

  • Manual for 8330 Curve?

    I never got my manual for my 8330 curve and I looked it up on the internet and there are 244 pages! How can I actually get the manual i can hold in my hand and read??
    Message was edited by: Verizon Moderator

    It may only be available in electronic format (a lot of new phone manuals are on CD, or online now). 
    Short of printing it out, I don't know that there is a way if it is only available in pdf format.  Consider taking the file to Kinko's and having them print it if you absolutely need to have it in your hands.

  • Sirius radio application for 8330 curve

    anyone tried to download the app for their 8330 curve and it did not work.  Has any found out how to get the app to work.

    So what happens when you click on that icon?
    Do you have a BlackBerry Data Plan enabled on your account with your carrier or mobile provider?
    You must, in order to get the RIM push email functions you are looking for, as well as addtional BlackBerry data services such as the internet browser, Facebook for BlackBerry, BlackBerry Messenger, and much more.
    So, call your carrier and inquire about having the BlackBerry Data Plan added to your account.
    Good luck.
    1. If any post helps you please click the below the post(s) that helped you.
    2. Please resolve your thread by marking the post "Solution?" which solved it for you!
    3. Install free BlackBerry Protect today for backups of contacts and data.
    4. Guide to Unlocking your BlackBerry & Unlock Codes
    Join our BBM Channels (Beta)
    BlackBerry Support Forums Channel
    PIN: C0001B7B4   Display/Scan Bar Code
    Knowledge Base Updates
    PIN: C0005A9AA   Display/Scan Bar Code

  • Battery for a curve 8330

    Where can i buy a battery for a curve 8330?
    please help

    Most any store that sells BlackBerrys.... as well as eBay,.
    Where are you? In the US, any Verizon, ATT, Sprint or Tmobile store would have that blue CS2 battery. It also fits the 8300, 8310, 8320 and the 8700 if I recall correctly.
    1. If any post helps you please click the below the post(s) that helped you.
    2. Please resolve your thread by marking the post "Solution?" which solved it for you!
    3. Install free BlackBerry Protect today for backups of contacts and data.
    4. Guide to Unlocking your BlackBerry & Unlock Codes
    Join our BBM Channels (Beta)
    BlackBerry Support Forums Channel
    PIN: C0001B7B4   Display/Scan Bar Code
    Knowledge Base Updates
    PIN: C0005A9AA   Display/Scan Bar Code

  • Query Curves Layer for current settings

    Hi All,
    I am trying to work out how to query a curves layer for it's current settings. I have used the script listner to capture the code on how to apply settings but can't work out how to query the settings. The output from the script listner when applying new settings is as follows:
    // =======================================================
    var idsetd = charIDToTypeID( "setd" );
        var desc19 = new ActionDescriptor();
        var idnull = charIDToTypeID( "null" );
            var ref13 = new ActionReference();
            var idAdjL = charIDToTypeID( "AdjL" );
            var idOrdn = charIDToTypeID( "Ordn" );
            var idTrgt = charIDToTypeID( "Trgt" );
            ref13.putEnumerated( idAdjL, idOrdn, idTrgt );
        desc19.putReference( idnull, ref13 );
        var idT = charIDToTypeID( "T   " );
            var desc20 = new ActionDescriptor();
            var idAdjs = charIDToTypeID( "Adjs" );
                var list3 = new ActionList();
                    var desc21 = new ActionDescriptor();
                    var idChnl = charIDToTypeID( "Chnl" );
                        var ref14 = new ActionReference();
                        var idChnl = charIDToTypeID( "Chnl" );
                        var idChnl = charIDToTypeID( "Chnl" );
                        var idCmps = charIDToTypeID( "Cmps" );
                        ref14.putEnumerated( idChnl, idChnl, idCmps );
                    desc21.putReference( idChnl, ref14 );
                    var idCrv = charIDToTypeID( "Crv " );
                        var list4 = new ActionList();
                            var desc22 = new ActionDescriptor();
                            var idHrzn = charIDToTypeID( "Hrzn" );
                            desc22.putDouble( idHrzn, 0.000000 );
                            var idVrtc = charIDToTypeID( "Vrtc" );
                            desc22.putDouble( idVrtc, 0.000000 );
                        var idPnt = charIDToTypeID( "Pnt " );
                        list4.putObject( idPnt, desc22 );
                            var desc23 = new ActionDescriptor();
                            var idHrzn = charIDToTypeID( "Hrzn" );
                            desc23.putDouble( idHrzn, 127.000000 );
                            var idVrtc = charIDToTypeID( "Vrtc" );
                            desc23.putDouble( idVrtc, 127.000000 );
                        var idPnt = charIDToTypeID( "Pnt " );
                        list4.putObject( idPnt, desc23 );
                            var desc24 = new ActionDescriptor();
                            var idHrzn = charIDToTypeID( "Hrzn" );
                            desc24.putDouble( idHrzn, 255.000000 );
                            var idVrtc = charIDToTypeID( "Vrtc" );
                            desc24.putDouble( idVrtc, 255.000000 );
                        var idPnt = charIDToTypeID( "Pnt " );
                        list4.putObject( idPnt, desc24 );
                    desc21.putList( idCrv, list4 );
                var idCrvA = charIDToTypeID( "CrvA" );
                list3.putObject( idCrvA, desc21 );
            desc20.putList( idAdjs, list3 );
        var idCrvs = charIDToTypeID( "Crvs" );
        desc19.putObject( idT, idCrvs, desc20 );
    executeAction( idsetd, desc19, DialogModes.NO );
    I want to query the Hrzn and Vrtc parameters for 0, 127 and 255 on an existing curves layer.
    Any help in working out how to do this would be greatly appreciated.
    Thx in advance.

    This is a bit of a hack but it should give you a place to start.
    // Works with RGB or CMYK images.
    // Does not work at all with greyscale, or indexColor
    // Does not work correctly with Lab
    function convertBCD( num ){
        var res = new Array;
        if(num > 16 ){
            res.unshift(1);
            num = num - 16;
        }else{
            res.unshift(0);
        if(num > 8 ){
            res.unshift(1);
            num = num - 8;
        }else{
            res.unshift(0);
        if(num > 4 ){
            res.unshift(1);
            num = num - 4;
        }else{
            res.unshift(0);
        if(num > 2 ){
            res.unshift(1);
            num = num - 2;
        }else{
            res.unshift(0);
        if(num == 1 ){
            res.unshift(1);
        }else{
            res.unshift(0);
        return res;
    function getCurve( numberOfPoints ){
        this.getPoints = function(){
            this.tempArray = new Array;
            this.tempArray.push( rawDesc.charCodeAt( pointer ) );
            pointer = pointer + 2;// set pointer to next point
            this.tempArray.push( rawDesc.charCodeAt( pointer ) );
            return this.tempArray;
        this.pointsArray = new Array;
        for( var i = 0; i < numberOfPoints; i++ ){
            pointer = pointer + 2;// next point
            this.pointsArray.push( this.getPoints() );
        pointer = pointer + 2;// next curve
        return this.pointsArray;
    var ref = new ActionReference();
    ref.putEnumerated( charIDToTypeID( 'Lyr ' ), charIDToTypeID( 'Ordn' ), charIDToTypeID( 'Trgt' ) );
    var rawDesc = executeActionGet( ref ).getList( stringIDToTypeID( 'adjustment' ) ).getObjectValue( 0 ).getData( stringIDToTypeID( 'legacyContentData' ) );
    var pointer = 2;// used to read rawData similar to reading a file
    var flag = rawDesc.charCodeAt( pointer );// char at offset 2 always == 1 so use to validate data
    if( flag != 1 ) forceError;// unknown problem with rawData
        pointer = 6;// update pointer to BCD byte
        var bcd = rawDesc.charCodeAt( pointer );
        if( bcd < 0 || bcd > 31 ) forceError;// check for valid value
        if( bcd == 0 ) forceError;// an empty adjustment - no curves to process
        var bcdArray = convertBCD( bcd );
        var numberOfCurves = bcdArray.toString().match(/(1)/g).length;
        var curvesArray = new Array;
        pointer = 8;// set pointer to start of curve data
        for(var i = 0; i < numberOfCurves; i++ ){
            var numberOfPoints = rawDesc.charCodeAt( pointer );
            curvesArray.push( getCurve( numberOfPoints ) );
    // now need to map rawData curves in curvesArray to known channel curves
    var acvArray = new Array;
    if( bcdArray[0] == 1 ) {
        acvArray.push( curvesArray.shift() );
    } else {
        acvArray.push( [ [0,0],[255,255] ] );
    if( bcdArray[1] == 1 ) {
        acvArray.push( curvesArray.shift() );
    } else {
        acvArray.push( [ [0,0],[255,255] ] );
    if( bcdArray[2] == 1 ) {
        acvArray.push( curvesArray.shift() );
    } else {
        acvArray.push( [ [0,0],[255,255] ] );
    if( bcdArray[3] == 1 ) {
        acvArray.push( curvesArray.shift() );
    } else {
        acvArray.push( [ [0,0],[255,255] ] );
    if( bcdArray[4] == 1 ) {
        acvArray.push( curvesArray.shift() );
    } else {
        acvArray.push( [ [0,0],[255,255] ] );
    if(app.activeDocument.mode == DocumentMode.RGB){
        var cNames = ['RGB','Red','Green','Blue'];
        for(c=0;c<acvArray.length-1;c++){
            alert(cNames[c]+': '+acvArray[c]);
    if(app.activeDocument.mode ==  DocumentMode.CMYK){
        var cNames = ['CMYK','Cyan','Magenta','Yellow','Black'];
        for(c=0;c<acvArray.length;c++){
            alert(cNames[c]+': '+acvArray[c]);

  • WiFi for Blackberry 8330 Curve/Telus

    Is there no upgrade for Blackberry 8330 Curve to be able to use WiFi?

    Unfortunately no, the 8330 does not have a wi-fi adapter built into the device. The 8320 does have it however.
    If someone has been helpful please consider giving them kudos by clicking the star to the left of their post.
    Remember to resolve your thread by clicking Accepted Solution.

  • Java for BB 8330 Curve?

    Is there a way I can get Java to work on my Blackberry 8330 Curve? I have looked everywhere and can't find anything about it! Thanks.........
    ummagumma

    Look at your BB > browser > options > browser config > Browser emulation (or identification) and set that to BlackBerry.
    1. If any post helps you please click the below the post(s) that helped you.
    2. Please resolve your thread by marking the post "Solution?" which solved it for you!
    3. Install free BlackBerry Protect today for backups of contacts and data.
    4. Guide to Unlocking your BlackBerry & Unlock Codes
    Join our BBM Channels (Beta)
    BlackBerry Support Forums Channel
    PIN: C0001B7B4   Display/Scan Bar Code
    Knowledge Base Updates
    PIN: C0005A9AA   Display/Scan Bar Code

  • Suggestions needed for blackberry 8330 curve

    Hi
    I have a Blackberry 8330 Curve and am on Verizon. Saturday night my messaging system decided on it's own to separate all my messages. Some of the saved ones I have are now dated 12/5 (were from august!). On top of that when my email is downloaded into my Outlook account the emails are no longer taken off the phone. It is very very hard to open up any of my messages-usually takes 2 or 3 clicks to get them open. Am able to send emails and messages.
    Another problem is that I can not update information or comment on people's status on Facebook. This isn't a big problem but is frustrating to me.
    I have occasionally been getting this error message: uncaught exception:Java.lang.ArrayIndexOutofBoundsException
    I
    have rebooted multiple times went to Verizon & this very unhelpful man said all he could do is wipe my phone since there was not a technician there that was proficient on Blackberry.
    Any suggestions are welcomed!
    Thanks
    Kitty

    Unfortunately no, the 8330 does not have a wi-fi adapter built into the device. The 8320 does have it however.
    If someone has been helpful please consider giving them kudos by clicking the star to the left of their post.
    Remember to resolve your thread by clicking Accepted Solution.

  • Upgrading 8330 Curve Software to 4.5 from Verizon

    Recently I upgraded my 8330 Curve with the new 4.5 software.
    Afterwards, pictures and Media do not appear in emails or in the browser without having to
    hit the menu key and click on "Display Images".
    I spoke with Verizon Tech Services for 2 hours and tried everything they had to offer.
    After Backing up the unit and Synchronizing we wiped the phone clean and reloaded the 4.5
    software.
    The same problem still exists and Verizon had no further solutions.
    Is there a fix for this or should I dare get a Corona and skip this thing across Megans Bay.
    Thanks,
    Zoomer33

    1. This is something I do every Sunday. If I don't the browser becomes bogged down and won't open web pages.
        A. Got to Options, Advanced Options, Host Routing Table, Click Menu, Register Now.
        B. After Registration has been sent and received, I remove the battery (while the divice is on) wait a few minutes. Replace the battery and
            allow the device to reboot.
        C. dial *228 and allow Verizon to re-program the phone. This is always succesful.
    2. Send Service Books
    3. Synchronize with BB Desktop Manager.
    4. Upgrade Desktop Manager to v4.7
    5. Upload "New" Device Software 4.5.0.77 (Platform 3.2.0.51)
    6. Wipe phone clean.
    7. Upload new 4.5 software to phone.
    8. Synchronize Phone.
    9. Go to "Options", "Screen/Keyboard, set Font size and style.
    10. Go to "Options", Security, General Settings, Enable Content Compression.
    11. Go to "Options", Advanced, Browser Push, Enable Push, Enable MDS and WAP. Auto selected on all others.
    12. Send emails to self from Desktop Computer. and Repeat Step 1.
    I think thats it.

  • All-Day Events Don't Appear in Calendar of Today Theme on Verizon 8330 Curve

    I have a new Verizon 8330 Curve synchronized with my Outlook desktop calendar.
    Using the BB Today Theme, only those calendar events lasting less than one day -- one hour, 15 minutes, etc. -- appear under the calendar on the home screen. No all-day events appear on the home screen.
    The Today theme apparently does not recognize all-day events.
    This is not acceptable. I have plenty of all-day events in the calendar that ought to be appearing on the home screen, alongside 15-minute events, when they're coming up next.
    The Verizon tech people are totally perplexed by this, saying they've not heard of such an issue. They think there may be a problem with the Curve device, and they're sending me a new one.
    However, I've seen a fair amount of discussion online concerning this quirk, so it seems like there's a bona fide synchronization problem between the Blackberry calendar/theme and Outlook as it pertains to all-day events.
    Could somebody from Blackberry please weigh in with a definitive solution? I can't be the only guy in America who care about the fact that birthdays, anniversaries, etc. are not appearing on the BB home screen under the Today theme.

    I take it then you don't have a memory problem. Just to clarify, your events on the calendar are fine, it's just the display
    on the home screen where they disappear?
    Have you tried a battery pull to reset all options?  Pill the battery from the phone while it is ON, leave it out for about a
    minute and replace. Leave the system completly reboot 1-2 minutes and see if the problem continues. This is a common fix on these forums.
    Let us know!
    Click Accept as Solution for posts that have solved your issue(s)!
    Be sure to click Like! for those who have helped you.
    Install BlackBerry Protect it's a free application designed to help find your lost BlackBerry smartphone, and keep the information on it secure.

  • Caller ID not working on 8330 Curve

    Does anyone know how to fix the caller ID on my 8330 curve. Incoming calls from my address book are coming in as "unknown number" - its only some of the contacts, not all. BB supprt and Sprint couldn't figure it out.
    Thanks!

    First, go into the Phone app (press the Green [Call] button), then hit the [Menu] button (button to the LEFT of the TrackBall) and select Options --> Smart Dialing.  Make sure your Country Code and Area Code are set correctly.
    Also, make sure that phone numbers in your Address Book entries are formatted like a phone number.  The most standard format is:
    +1 (123) 123-1234
    for the US. 
    Jerry

  • I have a 8330 curve and would like to force roaming on it

    I have a 8330 curve and would like to force roaming on it. I get signal from my carrier but signal isn't very good and phone will get signal and then loose it. There are time it locks on roaming tower but won't stay there and when this happens i have lots of dropped calls. thanks for any help richard

    You could use Google Calendar and Google Contacts. Both synchronize effortlessly with blackberry (assuming you have a data contract) and both can sync with Thunderbird with the help of suitable add-ons such as Lightning for the calendar and gContactSync etc for your Thunderbird address book.
    As regards the calendar, I use it to sync Events, I can't speak for Tasks. They seem to have a cinderella status in Lightning. :-(

  • RSS Feeds on 8330 Curve

    Hello,
    Wondering how to subscribe to RSS Feeds using the Blackberry Browser. I have an 8330 Curve - 4.5.0.138 OS
    Found documentation that states the following:
    Subscribe to a web feed
    On a web page, press the Menu key.
    Click Add Web Feed.
    Select the check box beside a web feed.
    In the Auto Synchronize field, set how often the browser should check for updates to the web feed.
    In the Start time field, set the time of day when the browser should start checking for updates.
    Click Add
    However, I don't seem to have this option "Add Web Feed" in my meu.
    I have navigated to several web feed pages and clicked the menu key. I have the "add bookmark" option where I can select auto synchronize but nothing that says "Add Web Feed"
    Any thoughts or solutions would be very much appreciated.
    Thanks!

    Issue resolved. I changed the browser from "Blackberry Brower" to "Internet Browser" and the Add Web Feed option appears in the menu.

  • Best Security Settings for Mac Newbie

    Hello
    I'm new Mac user (OS X 10.9) and am still trying to get to grips with Apple's OS.
    Hopefully this question won't have been asked too many times before! Sorry
    In 'settings' - 'security & privacy', how should I configure it?
    It's just me using the computer and I guess I'm an average home user and don't have anything particulaly sensitive on the laptop. I have encryted my 'financial stuff' folder into a .dmg file? Plus I don't tend to access or download any dodgy stuff, pirated software/music, etc, or ****.
    But I obviously I still want to try to prevent hackers, viruses, malware, etc. When I used to have a windows computer I used to use 3rd security software. Do I need to purchase similar for my Mac, and if so any recommndations?
    Regards Richard

    1. This is a comment on what you should and should not do to protect yourself from malicious software ("malware") that circulates on the Internet. It does not apply to software, such as keystroke loggers, that may be installed deliberately by an intruder who has hands-on access to your computer, or who has been able to log in to it remotely. That threat is in a different category, and there's no easy way to defend against it. If you have reason to suspect that you're the target of such an attack, you need expert help.
    If you find this comment too long or too technical, read only sections 5, 6, and 10.
    OS X now implements three layers of built-in protection specifically against malware, not counting runtime protections such as execute disable, sandboxing, system library randomization, and address space layout randomization that may also guard against other kinds of exploits.
    2. All versions of OS X since 10.6.7 have been able to detect known Mac malware in downloaded files, and to block insecure web plugins. This feature is transparent to the user. Internally Apple calls it "XProtect."
    The malware recognition database used by XProtect is automatically updated; however, you shouldn't rely on it, because the attackers are always at least a day ahead of the defenders.
    The following caveats apply to XProtect:
    It can be bypassed by some third-party networking software, such as BitTorrent clients and Java applets.
    It only applies to software downloaded from the network. Software installed from a CD or other media is not checked.
    As new versions of OS X are released, it's not clear whether Apple will indefinitely continue to maintain the XProtect database of older versions such as 10.6. The security of obsolete system versions may eventually be degraded. Security updates to the code of obsolete systems will stop being released at some point, and that may leave them open to other kinds of attack besides malware.
       3. Starting with OS X 10.7.5, there has been a second layer of built-in malware protection, designated "Gatekeeper" by Apple. By default, applications and Installer packages downloaded from the network will only run if they're digitally signed by a developer with a certificate issued by Apple. Software certified in this way hasn't necessarily been tested by Apple, but you can be reasonably sure that it hasn't been modified by anyone other than the developer. His identity is known to Apple, so he could be held legally responsible if he distributed malware. That may not mean much if the developer lives in a country with a weak legal system (see below.)
    Gatekeeper doesn't depend on a database of known malware. It has, however, the same limitations as XProtect, and in addition the following:
    It can easily be disabled or overridden by the user.
    A malware attacker could get control of a code-signing certificate under false pretenses, or could simply ignore the consequences of distributing codesigned malware.
    An App Store developer could find a way to bypass Apple's oversight, or the oversight could fail due to human error.
    For the reasons given above, App Store products, and other applications recognized by Gatekeeper as signed, are safer than others, but they can't be considered absolutely safe. "Sandboxed" applications may prompt for access to private data, such as your contacts, or for access to the network. Think before granting that access. Sandboxing security is based on user input. Never click through any request for authorization without thinking.
    4. Starting with OS X 10.8.3, a third layer of protection has been added: a "Malware Removal Tool" (MRT). MRT runs automatically in the background when you update the OS. It checks for, and removes, malware that may have evaded the other protections via a Java exploit (see below.) MRT also runs when you install or update the Apple-supplied Java runtime (but not the Oracle runtime.) Like XProtect, MRT is effective against known threats, but not against unknown ones. It notifies you if it finds malware, but otherwise there's no user interface to MRT.
    5. The built-in security features of OS X reduce the risk of malware attack, but they're not absolute protection. The first and best line of defense is always going to be your own intelligence. With the possible exception of Java exploits, all known malware circulating on the Internet that affects a fully-updated installation of OS X 10.6 or later takes the form of so-called "Trojan horses," which can only have an effect if the victim is duped into running them. The threat therefore amounts to a battle of wits between you and Internet criminals. If you're smarter than they think you are, you'll win. That means, in practice, that you always stay within a safe harbor of computing practices. How do you know when you're leaving the safe harbor? Below are some red flags that indicate danger.
    Software from an untrustworthy source
    Software of any kind is distributed via BitTorrent or Usenet.
    Software with a corporate brand, such as Adobe Flash Player, doesn't come directly from the developer’s website.
    Rogue websites such as Softonic and CNET Download distribute free applications that have been packaged in a superfluous "installer."
    The software is advertised by means of spam or intrusive web popups.
    Software that is plainly illegal or does something illegal
    Software that you would otherwise have to pay for is "cracked" or "free."
    An application helps you to infringe copyright, for instance by circumventing the copy protection on commercial software, or saving streamed media for reuse without permission.
    Conditional or unsolicited offers from strangers
    A telephone caller or a web page tells you that you have a “virus” and offers to help you remove it. (Some reputable websites did legitimately warn visitors who were infected with the "DNSChanger" malware. That exception to this rule no longer applies.)
    A web site offers free content such as video or music, but to use it you must install a “codec,” “plug-in,” "player," "downloader," "extractor," or “certificate” that comes from that same site, or an unknown one.
    You win a prize in a contest you never entered.
    Someone on a message board such as this one is eager to help you, but only if you download an application of his choosing.
    A "FREE WI-FI !!!" network advertises itself in a public place such as an airport, but is not provided by the management.
    Unexpected events
    You open what looks like a document and get an alert that it's "an application downloaded from the Internet." Click Cancel and delete the file or message.
    An application does something you don't expect, such as asking for permission to access your contacts, your location, or the Internet for no obvious reason.
    Software is attached to email that you didn't request, even if it comes (or seems to come) from someone you trust.
    I don't say that leaving the safe harbor just once will necessarily result in disaster, but making a habit of it will weaken your defenses against malware attack. Any of the above scenarios should, at the very least, make you uncomfortable.
       6. Java on the Web (not to be confused with JavaScript, to which it's not related, despite the similarity of the names) is a weak point in the security of any system. Java is, among other things, a platform for running complex applications in a web page, on the client. That was always a bad idea, and Java's developers have proven themselves incapable of implementing it without also creating a portal for malware to enter. Past Java exploits are the closest thing there has ever been to a Windows-style virus affecting OS X. Merely loading a page with malicious Java content could be harmful.
    Fortunately, client-side Java on the Web is obsolete and mostly extinct. Only a few outmoded sites still use it. Try to hasten the process of extinction by avoiding those sites, if you have a choice. Forget about playing games or other non-essential uses of Java.
    Java is not included in OS X 10.7 and later. Discrete Java installers are distributed by Apple and by Oracle (the developer of Java.) Don't use either one unless you need it. Most people don't. If Java is installed, disable it — not JavaScript — in your browsers.
    Regardless of version, experience has shown that Java on the Web can't be trusted. If you must use a Java applet for a task on a specific site, enable Java only for that site in Safari. Never enable Java for a public website that carries third-party advertising. Use it only on well-known, login-protected, secure websites without ads. In Safari 6 or later, you'll see a lock icon in the address bar with the abbreviation "https" when visiting a secure site.
    Stay within the safe harbor, and you’ll be as safe from malware as you can practically be. The rest of this comment concerns what you should not do to protect yourself.
    7. Never install any commercial "anti-virus" or "Internet security" products for the Mac, as they all do more harm than good, if they do any good at all. If you need to be able to detect Windows malware in your files, use one of the free security apps in the Mac App Store — nothing else.
    Why shouldn't you use commercial "anti-virus" products?
    To recognize malware, the software depends on a database of known threats, which is always at least a day out of date. New threats are emerging on a daily basis. Research has shown that most successful attacks are "zero-day" — that is, previously unknown. Recognition-based malware scanners do not defend against such attacks.
    Their design is predicated on the nonexistent threat that malware may be injected at any time, anywhere in the file system. Malware is downloaded from the network; it doesn't materialize from nowhere.
    In order to meet that nonexistent threat, the software modifies or duplicates low-level functions of the operating system, which is a waste of resources and a common cause of instability, bugs, and poor performance.
    By modifying the operating system, the software itself may create weaknesses that could be exploited by malware attackers.
    8. An anti-malware product from the App Store, such as "ClamXav," has the same drawback as the commercial suites of being always out of date, but it does not inject code into the operating system. That doesn't mean it's entirely harmless. It may report email messages that have "phishing" links in the body, or Windows malware in attachments, as infected files, and offer to delete or move them. Doing so will corrupt the Mail database. The messages should be deleted from within the Mail application.
    An anti-virus app is not needed, and should not be relied upon, for protection against OS X malware. It's useful only for detecting Windows malware, and even for that use it's not completely effective. Windows malware can't harm you directly (unless, of course, you use Windows.) Just don't pass it on to anyone else.
    A Windows malware attachment in email is usually easy to recognize. The file name will often be targeted at people who aren't very bright; for example:
    ♥♥♥♥♥♥♥♥♥♥♥♥♥♥!!!!!!!H0TBABEZ4U!!!!!!!.AVI♥♥♥♥♥♥♥♥♥♥♥♥♥♥.exe
    Anti-virus software may be able to tell you which particular trojan it is, but do you really care? In practice, there's seldom a reason to use the software unless an institutional policy requires it. Windows malware is so widespread that you should assume it's in every unknown email attachment until proven otherwise.
    The ClamXav developer won't try to "upsell" you to a paid version of the product. Other developers may do that. Don't be upsold. For one thing, you should not pay to protect Windows users from the consequences of their choice of computing platform. For another, a paid upgrade from a free app will probably have all the disadvantages mentioned in section 7.
    9. It seems to be a common belief that the built-in Application Firewall acts as a barrier to infection, or prevents malware from functioning. It does neither. It blocks inbound connections to certain network services you're running, such as file sharing. It's disabled by default and you should leave it that way if you're behind a router on a private home or office network. Activate it only when you're on an untrusted network, for instance a public Wi-Fi hotspot, where you don't want to provide services. Disable any services you don't use in the Sharing preference pane. All are disabled by default.
    10. As a Mac user you don't have to live in fear that your computer may be infected every time you install software, read email, or visit a web page. But neither should you assume that you will always be safe from exploitation, no matter what you do. The greatest harm done by security software is precisely its selling point: it makes people feel safe. They may then feel safe enough to take risks from which the software doesn't protect them. "Hmmmm, this torrent is a crack of that new game I want. I think I'll download it. It could be a trojan, but the antivirus will warn me if it is." Then they wonder why their Mac is so slow all of a sudden. It's slow because it's running flat out mining bitcoins for a hacker who has already sold their credit card number and banking passwords to a criminal gang. Maybe a week later the antivirus does warn them, but what good does that do?
    Nothing can lessen the need for safe computing practices.

  • Internet security suites for Mac

    With the various internet security suites on the market, I wonder which one would be a good one to purchase?  I tend to be very leery of the reviews I read of these various security suites.  Therefore  any feedback would be most appreicated. Thanks Dave

    1. This comment applies to malicious software ("malware") that's installed unwittingly by the victim of a network attack. It does not apply to software, such as keystroke loggers, that may be installed deliberately by an intruder who has hands-on access to the victim's computer. That threat is in a different category, and there's no easy way to defend against it. If you have reason to suspect that you're the target of such an attack, you need expert help.
    OS X now implements three layers of built-in protection specifically against malware, not counting runtime protections such as execute disable, sandboxing, system library randomization, and address space layout randomization that may also guard against other kinds of exploits.
    2. All versions of OS X since 10.6.7 have been able to detect known Mac malware in downloaded files, and to block insecure web plugins. This feature is transparent to the user, but internally Apple calls it "XProtect." The malware recognition database is automatically checked for updates once a day; however, you shouldn't rely on it, because the attackers are always at least a day ahead of the defenders.
    The following caveats apply to XProtect:
    It can be bypassed by some third-party networking software, such as BitTorrent clients and Java applets.
    It only applies to software downloaded from the network. Software installed from a CD or other media is not checked.
    3. Starting with OS X 10.7.5, there has been a second layer of built-in malware protection, designated "Gatekeeper" by Apple. By default, applications and Installer packages downloaded from the network will only run if they're digitally signed by a developer with a certificate issued by Apple. Software certified in this way hasn't necessarily been tested by Apple, but you can be reasonably sure that it hasn't been modified by anyone other than the developer. His identity is known to Apple, so he could be held legally responsible if he distributed malware. That may not mean much if the developer lives in a country with a weak legal system (see below.)
    Gatekeeper doesn't depend on a database of known malware. It has, however, the same limitations as XProtect, and in addition the following:
    It can easily be disabled or overridden by the user.
    A malware attacker could get control of a code-signing certificate under false pretenses, or could simply ignore the consequences of distributing codesigned malware.
    An App Store developer could find a way to bypass Apple's oversight, or the oversight could fail due to human error.
    For the reasons given above, App Store products, and other applications recognized by Gatekeeper as signed, are safer than others, but they can't be considered absolutely safe. "Sandboxed" applications may prompt for access to private data, such as your contacts, or for access to the network. Think before granting that access. OS X security is based on user input. Never click through any request for authorization without thinking.
    4. Starting with OS X 10.8.3, a third layer of protection has been added: a "Malware Removal Tool" (MRT). MRT runs automatically in the background when you update the OS. It checks for, and removes, malware that may have evaded the other protections via a Java exploit (see below.) MRT also runs when you install or update the Apple-supplied Java runtime (but not the Oracle runtime.) Like XProtect, MRT is presumably effective against known attacks, but maybe not against unknown attacks. It notifies you if it finds malware, but otherwise there's no user interface to MRT.
    5. XProtect, Gatekeeper, and MRT reduce the risk of malware attack, but they're not absolute protection. The first and best line of defense is always your own intelligence. With the possible exception of Java exploits, all known malware circulating on the Internet that affects a fully-updated installation of OS X 10.6 or later takes the form of so-called "trojan horses," which can only have an effect if the victim is duped into running them. The threat therefore amounts to a battle of wits between you and the malware attacker. If you're smarter than he thinks you are, you'll win.
    That means, in practice, that you never use software that comes from an untrustworthy source, or that does something inherently untrustworthy. How do you know what is trustworthy?
    Any website that prompts you to install a “codec,” “plug-in,” "player," "extractor," or “certificate” that comes from that same site, or an unknown one, is untrustworthy.
    A web operator who tells you that you have a “virus,” or that anything else is wrong with your computer, or that you have won a prize in a contest you never entered, is trying to commit a crime with you as the victim. (Some reputable websites did legitimately warn visitors who were infected with the "DNSChanger" malware. That exception to this rule no longer applies.)
    Pirated copies or "cracks" of commercial software, no matter where they come from, are unsafe.
    Software of any kind downloaded from a BitTorrent or from a Usenet binary newsgroup is unsafe.
    Software that purports to help you do something that's illegal or that infringes copyright, such as saving streamed audio or video for reuse without permission, is unsafe. All YouTube "downloaders" are in this category, though not all are necessarily harmful.
    Software with a corporate brand, such as Adobe Flash Player, must be downloaded directly from the developer’s website. If it comes from any other source, it's unsafe.
    Even signed applications, no matter what the source, should not be trusted if they do something unexpected, such as asking for permission to access your contacts, your location, or the Internet for no obvious reason.
    6. Java on the Web (not to be confused with JavaScript, to which it's not related, despite the similarity of the names) is a weak point in the security of any system. Java is, among other things, a platform for running complex applications in a web page, on the client. That was always a bad idea, and Java's developers have proven themselves incapable of implementing it without also creating a portal for malware to enter. Past Java exploits are the closest thing there has ever been to a Windows-style virus affecting OS X. Merely loading a page with malicious Java content could be harmful.
    Fortunately, client-side Java on the Web is obsolete and mostly extinct. Only a few outmoded sites still use it. Try to hasten the process of extinction by avoiding those sites, if you have a choice. Forget about playing games or other non-essential uses of Java.
    Java is not included in OS X 10.7 and later. Discrete Java installers are distributed by Apple and by Oracle (the developer of Java.) Don't use either one unless you need it. Most people don't. If Java is installed, disable it — not JavaScript — in your browsers.
    Regardless of version, experience has shown that Java on the Web can't be trusted. If you must use a Java applet for a task on a specific site, enable Java only for that site in Safari. Never enable Java for a public website that carries third-party advertising. Use it only on well-known, login-protected, secure websites without ads. In Safari 6 or later, you'll see a lock icon in the address bar with the abbreviation "https" when visiting a secure site.
    Follow the above guidelines, and you’ll be as safe from malware as you can practically be. The rest of this comment concerns what you should not do to protect yourself from malware.
    7. Never install any commercial "anti-virus" or "Internet security" products for the Mac, as they all do more harm than good, if they do any good at all. Any database of known threats is always going to be out of date. Most of the danger is from unknown threats. If you need to be able to detect Windows malware in your files, use the free software  ClamXav— nothing else.
    Why shouldn't you use commercial "anti-virus" products?
    Their design is predicated on the nonexistent threat that malware may be injected at any time, anywhere in the file system. Malware is downloaded from the network; it doesn't materialize from nowhere.
    In order to meet that nonexistent threat, the software modifies or duplicates low-level functions of the operating system, which is a waste of resources and a common cause of instability, bugs, and poor performance.
    By modifying the operating system, the software itself may create weaknesses that could be exploited by malware attackers.
    8. ClamXav doesn't have these drawbacks. That doesn't mean it's entirely safe. It may report email messages that have "phishing" links in the body, or Windows malware in attachments, as infected files, and offer to delete or move them. Doing so will corrupt the Mail database. The messages should be deleted from within the Mail application.
    ClamXav is not needed, and should not be relied upon, for protection against OS X malware. It's useful only for detecting Windows malware. Windows malware can't harm you directly (unless, of course, you use Windows.) Just don't pass it on to anyone else.
    A Windows malware attachment in email is usually easy to recognize. The file name will often be targeted at people who aren't very bright; for example:
    ♥♥♥♥♥♥♥♥♥♥♥♥♥♥!!!!!!!H0TBABEZ4U!!!!!!!.AVI♥♥♥♥♥♥♥♥♥♥♥♥♥♥.exe
    ClamXav may be able to tell you which particular virus or trojan it is, but do you care? In practice, there's seldom a reason to use ClamXav unless a network administrator requires you to run an anti-virus application.
    9. The greatest harm done by security software, in my opinion, is in its effect on human behavior. It does little or nothing to protect people from emerging "zero-day" threats, but if they get a false sense of security from it, they may feel free to do things that expose them to higher risk. Nothing can lessen the need for safe computing practices.
    10. It seems to be a common belief that the built-in Application Firewall acts as a barrier to infection, or prevents malware from functioning. It does neither. It blocks inbound connections to certain network services you're running, such as file sharing. It's disabled by default and you should leave it that way if you're behind a router on a private home or office network. Activate it only when you're on an untrusted network, for instance a public Wi-Fi hotspot, where you don't want to provide services. Disable any services you don't use in the Sharing preference pane. All are disabled by default.

Maybe you are looking for