h4k.com

Updating the popular WordPress blog software to the newest version can be automated using the WordPress Automatic Update plugin. The plugin takes care of everything including creating backups of the databases and even puts up an upgrade in progress notification on the front page. As with any software it is important to apply the relevant security updates on a timely basis so to help prevent the site from being attacked or used to unknowingly distribute exploits to visitors of the site. It seems that this type of update automation should be built in to the WordPress software by default but it is not so this is the plugin should be installed.

http://wordpress.org/extend/plugins/wordpress-automatic-upgrade/

The FlashBlock Firefox extension replaces any embedded flash code in a web page with a little flash symbol. Clicking on the symbol loads the flash object. This extension is great for preventing the many web sites that excessively use Flash objects from overwhelming Firefox. It also prevents sites from using Flash tracking objects and stopping other hidden malicious Flash objects.

http://flashblock.mozdev.org/

CERT has an informative how-to on securing your web browser. It details this task in Firefox, Internet Explorer and Safari with screen captures on the optimal security settings. The essay also covers some of the current and popular technologies operating in conjunction with the web browser and the risks they pose.

One good recommendation is to disable your web browser from automatically playing movies or sounds embedded in web pages. Embedding a hidden malicious .mov file into a web site would be simple to implement and having your web browser automatically executes movie clips without warning could quickly result in an infected computer.

http://www.cert.org/tech_tips/securing_browser/

A simple and functional hex editor for Linux.

Command line install:

sudo apt-get install ghex