Secunia Personal Software Inspector

[Broni]

https://psi.secunia.com/

I've been using it for awhile, and I like it a lot...

The Secunia PSI detects installed software and categorises your software as either Insecure, End-of-Life, or Up-To-Date. Effectively enabling you to focus your attention on software installations where more secure versions are available from the vendors.


Highlights of The Secunia PSI:

    * The Secunia PSI will be available free of charge
    * Calculates your unique Secunia System Score
    * Automatically scans your computer
    * Enables you to update Insecure/End-of-Life software
    * Provides Direct Download Links to security updates & patches
    * Detects and advises on more than 4,700 applications
    * Direct correlation between thousands of Secunia Advisories and your specific system and software
    * Secure SSL encrypted connection to Secunia

[soybean]

I downloaded, installed, and ran it.  Since I have a dual boot configuration with Win 98SE and Win XP Pro, Secunia PSI identified numerous programs that are installed under Win 98SE, even though the scan was run while booted to Win XP.  It identified 17 End-of-life software; all but 3 of those are installed under Win 98SE.  Since I rarely start my computer with Win 98SE nowadays, I'm not going to take any particular action on those 14 items. 

The identification of End-of-life software seems like information of marginal value.  Do they think we're supposed to go out and replace it with newer versions?  I'm not going to do that. 

The 3 things it listed under End-of-life software for Win XP were PowerDVD, WS_FTP Pro 7.x, and Macromedia Flash Player 8.x.  I rarely play DVDs on my computer, so I don't want to get a newer verion of PowerDVD; the version I have came with my DVD-ROM drive.  WS_FTP Pro, granted, is an old version of this FTP software, but, there again, I'm not inclined to buy a newer version when this version still serves my purposes.  And, Macromedia Flash Player 8.x is one I really don't know how to remove; it does not show up in my Add or Remove Programs list.

In Secunia's Insecure Software list, there, again, part of them were apps installed under Win 98SE.  Of 13, 8 were apps installed under Win XP.  This included Word 2003, Excel 2003, and Publisher 2003, all part of Office 2003.  I'll check to see whether any updates are available for Office, but I'm sure not going to uninstall it because of Secunia's Insecure Software list.

This list also includes, for Win XP, Macromedia Flash Player 6.x, Yahoo! Messenger 8.x, and Adobe Flash Player 9.x.  As previously stated, Macromedia Flash Player does not appear in my Add or Remove Programs list.  I see I have Adobe Flash Player 9,0,45,0 installed; the latest is 9,0,47,0, so, I'll update that.  I'll also take a look at Yahoo! Messenger; I only use it for occasional PC-to-phone calls, no messaging.

I'm not too concerned about the Insecure Software list.  I ran security tests from various sites back when this discussion was going on: Is a software firewall necessary?, and those tests confirmed my system is secure.  I'm using a router; that's the key.

[Broni]

Hmmm...
1. This program is in beta version, so I'm pretty sure, they'll improve it, especially since Secunia is very trustworthy company.
2. Nobody is forced to do anything, if one doesn't want to. I see this program more like a guidance. Personally, I never perform any minor upgrades, unless that upgrade is security related.
3. Surely, most people, including myself, have "End-of-life" programs, but if someone doesn't want to be warned about them, there is a ckickable option to turn it off.
4. As for Macromedia Flash Player, I had it listed before first run of Secunia, as well. But once I upgraded Adobe Flash Player (Macromedia's new owner), Macromedia Flash was removed from "End-of-life" list.

[soybean]

I need to spend some more time with it to get more familiar with all it's features.  One thing I believe I know now is that it will show multiple instances of Flash Player and Shockwave Player where two browsers, such as IE and FF, are installed.  That makes sense, since those plug-ins need to updated separately for each browser.

I've updated Flash Player in IE and FF to the latest version, 9,0,47,0, but I still see an item in the Insecure Software list software list indicating I have a Flash Player version 9,0,16,0 installed. 

Where's that option to turn off "End-of-life" programs for specific apps?

[Broni]

Where's that option to turn off "End-of-life" programs for specific apps?

Good question. I thought, it was there, but I must be mistaken, then....hmmmmmm

[patio]

I ran it and with the exception of my OS everything is "End of Life"....

[Broni]

I don't believe you, silly.
Post a screenshot, but not a fake one, like with Google certificate....LOL

[soybean]

Well, my Insecure Software list is down to 8 now.  I discovered that SP3 for Office 2003 is available.  I installed it; that resulted in Word, Excel, and Publisher dropping off the list.

I haven't restarted my computer yet since installing Secunia.  It normally runs in the background, right?  I see it's in the Startup group now, so it'll be running when I start my computer.  Did you noticed an increase in startup time after installing it?

[Zylstra]

I am going to have to try that out, it sounds interesting

(Scan is running in background)


Ahahaaaa!  Media Player Classic 6.x 6.4.9.1 ... end of life...

Insecure:
Microsoft Core XML Services (MSXML) 6.x 6.10.1129.0 
 Sun Java JRE 1.6.x / 6.x 6.0.20.5

Honestly, who actually hacks using Java Runtime exploits?

[patio]

Many more people than you would expect.
From what i understand it doesn't open the backdoor but is used to light up a few hallways is how i gathered it.

[Broni]

I see it's in the Startup group now, so it'll be running when I start my computer.  Did you noticed an increase in startup time after installing it?

I don't run it as a startup, because I don't expect extreme security updates twice a day.
I just want to check it out once in a while.

[Broni]

I don't know, if you guys remember, but few years ago, it was that really great program of this type, called BigFix.
Unfortunately, they went commercial, making corporate front pages news, but no more personal version.

[soybean]

I see it's in the Startup group now, so it'll be running when I start my computer.  Did you noticed an increase in startup time after installing it?

I don't run it as a startup, because I don't expect extreme security updates twice a day.
I just want to check it out once in a while.

Well, as far as I can tell, it installs that way by default.  I don't recall seeing any option, during installation, to choose whether I want it to launch during startup.  And, once installed, I see no option to change this.  So, exactly how did you install it so that it does not launch during startup?

[Calum]

I used to use Bigfix . . . it bugged me no end, it came with my PC and gave me useless information about 2 year old security updates.
Needless to say, it's long gone.
I'll give this Secunia PSI a whirl now, I gather it's a little similar to Filehippo's UDC?

[Broni]

Well, as far as I can tell, it installs that way by default.  I don't recall seeing any option, during installation, to choose whether I want it to launch during startup.  And, once installed, I see no option to change this.

You're totally right. I just unchecked it in msconfig.

[Broni]

I gather it's a little similar to Filehippo's UDC?

Not really. I have Filehippo, too, but it checks only for softwares new updates, not security-wise.
It's also, obviously limited to any database Filehippo has.

[Calum]

I gather it's a little similar to Filehippo's UDC?

Not really. I have Filehippo, too, but it checks only for softwares new updates, not security-wise.

Fair point.

It's also, obviously limited to any database Filehippo has.

And PSI is also, obviously, limited to any database Secunia has. 
I gave PSI a whirl, it showed three out of date programs . . . two versions of Flash 6 (one from Dreamweaver MX that isn't installed, and one from my other boot, where I don't need to update it) and another - an out of date version of MDAC, also from my other boot.
I found it very slow to launch, and also inconvenient to use (no shortcuts were installed).
I may try again when it's been developed more, but for now it's disappearing from my PC, like Bigfix.

[evilfantasy]

Honestly, who actually hacks using Java Runtime exploits?

July 23, 2007 New Trend in Attacking the Java Runtime Environment?

[Broni]

And PSI is also, obviously, limited to any database Secunia has.

Believe me, their database is huge, and up to date. It must the biggest, and most trusted security company.
I'm even subscribed to their mailing list:
http://secunia.com/mailing_lists/
so, if any new threat comes up, I know about it, the very same moment.
Visit their web site, and look around.

[soybean]

... an out of date version of MDAC, ...

It identified that on my system, too.  I updated it but Secunia is still showing the item under Insecure Software. 

I found it very slow to launch, ....

Me, too.

I may try again when it's been developed more, but for now it's disappearing from my PC, like Bigfix.

I'm thinking the same.