• Don’t put dates in file names unless you must keep multiple versions of a file online.
  • If I name my document List_of_Ponies2012.pdf and other offices link to that list, I break everyone else’s links when I replace the file with List_of_Ponies2013.pdf.
  • If I forget to delete the 2012 file, everyone else is seeing last year’s list of ponies, and we don’t want that!
  • If people must be able to refer to an older version of a file as well as the current version (example: financial aid forms), use dates, but make sure departments you work with know to check for new versions and update their links (or link to a page listing your forms)
  • List_of_Ponies.pdf is usually better than List_of_Ponies2013.pdf

• Remove spaces from file names. Browsers turn the character for a space into “%20″ and that gets really messy. Use Mixed Case or underscores instead of spaces.
  • http://www.brynmawr.edu/parties/Dinosaur Tea Party.pdf becomes http://www.brynmawr.edu/parties/Dinosaur%20Tea%20Party.pdf and can cause confusion or errors.
  • Or if you’re pasting that address into email, the space may cause the link to break, leading to confusion and sadness as your users go to http://www.brynmawr.edu/parties/Dinosaur and get an error.
  • Instead of Dinosaur Tea Party.pdf , use DinosaurTeaParty.pdf or Dinosaur_Tea_Party.pdf .

• Be consistent with your use of capital letters. This makes it easier to remember what you named a file, and also avoids a tricky difference between most of your computers’ operating systems and the web server’s.
  • Windows and Mac OSX don’t pay attention to case in file names– they think owls.pdf and OWLS.pdf are the same. So I can’t make two separate files called owls.pdf. and OWLS.pdf .
  • Linux, the operating system that runs our web server (and most other web servers) does pay attention to case in file names. So if I upload owls.pdf , and then later create some other file OWLS.pdf and upload it, they’ll both be there, causing confusion.

Need to clean up old files? Learn how to delete old files in Contribute or contact Web Services at help@brynmawr.edu for assistance in making sense of and cleaning up large numbers of website or blog files.

There are multiple ways to take a screenshot on a Mac depending on what you want to capture:

• To capture the entire screen, press Command+Shift+3. This will capture the entire screen as it appears to you and save it in a file to the desktop.
• To capture a rectangular screen selection, press Command+Shift+4 and select the area you would like to capture by clicking and dragging your mouse. This will save your selection as a file on the desktop.
• To capture a particular window, press Command+Shift+4, and instead of selecting the area you would like, press Space and click on the window you want to capture. This will capture the window and save it as a file on the desktop.
• To copy a sceenshot to the clipboard (so it can easily be pasted into another program or document rather than saved on the desktop), press Control in addition to any of the combinations above. This will not create a file on the desktop, but will save the image to your clipboard to paste elsewhere.

A complete list of changes is available in the WordPress Codex.

Highlights that may interest the Bryn Mawr community:

•  oEmbed support for SoundCloud.com, SlideShare.net, and Instagram.com . This means you can embed a slideshow or other media just by pasting the address from these sites, as is currently possible with YouTube, Flickr, etc.)
•  WordPress will point out some of the new Dashboard features when you encounter them for the first time. If you have seen enough balloons, dismiss them and they shall bother you no more.
•  A more mobile friendly Dashboard, for those editing on tablets or phones.
•  The media uploader button actually says it is a media uploader button! In usability, it’s often the small things that matter most.
  

  the old media uploader

  

  the new media uploader!

•  Customizer- all theme customizations in one menu option (those using older themes may still have multiple customization menus, as those themes were not designed with this feature in mind)
  
• Menus are less redundant, and if you hover over the lefthand Dashboard menus you see the options in each of them.
  

New themes: 

• Twenty Twelve (a simple, clean theme similar to Twenty Eleven, but with some different features including a separate front page template with its own sidebar, if you want your homepage to look different). http://wordpress.org/extend/themes/twentytwelve

Theme updates: 

• Twenty Eleven and Yoko have minor functionality improvements/additions.
• Tarski and Atahualpa have minor updates which should be completed after the upgrade, as additional configuration is required (this will not require additional downtime).

Plugin updates with new features: 

• ShareThis includes Pinterest and Instagram

1. From the Applications folder or dock, open the application titled Software Center.
2. Choose a category on the right. For example, to install a printer, choose Printers. All Programs will list all programs available to install.
3. Locate the program you wish to install and select Install below the program name.

• Software Center will download the program you have chosen before installing. To view the download progress, select In Progress from the menu on the left; your program’s progress bar will be at the top of the page.
• You can queue up multiple installations by pressing Install for multiple programs. They will queue in the order they are selected and install one-by-one. The In Progress menu on the left of the window will tell you the progress of your downloads.
• Once a program has been installed, you can find it in your Applications folder.

1. Click on Start.
2. Select Control Panel.
3. Open the Java control panel icon.
4. To disable Java within the browser:
1. Select the Security tab.
2. Uncheck “Enable Java content within the browser”.
3. Select the Advanced tab.
4. Uncheck the boxes for each browser under “Default Java for browsers”
5. To enable Java within the browser:
1. Select the Security tab.
2. Check “Enable Java content within the browser”.
3. Select the Advanced tab.
4. Check the boxes for each browser under “Default Java for browsers”

Mac OS X

1. To disable Java within the browser on a Bryn Mawr computer:
1. Open the Applications folder.
2. Open “Run Advertised Programs.”
3. Select the “All Programs” category on the right hand side.
4. Run the “Disable Java Plugin” program
2. To enable Java within the browser on a Bryn Mawr computer:
1. Open the Applications folder.
2. Open “Run Advertised Programs.”
3. Select the “All Programs” category on the right hand side.
4. Run the “Enable Java Plugin” program
3. To enable Java within the browser on a personally owned computer:
1. Follow instructions at for your platform to install/ upgrade to the latest Java version.
2. Open “System Preferences.”
3. Select the “Java” category at the bottom.
4. Select the “Security” tab
5. Check/ uncheck to enable/ disable respectively the Java plugin within the browser.

Example 1

Let’s start with an easy one.  In our first example, we will look at this somewhat weak attempt to impersonate a FedEx message:

What’s wrong with that, you ask? Let’s take a closer look…

1. It has an attachment which is a .doc file (not a .pdf).  The document does not reference in its name a tracking number or other specific information.  It is possible for some files, including .doc, .zip, and .exe files, to contain viruses.
2. It’s from a Mr. Ashley Sherlock, not from a FedEx alert address.  If I hold my mouse over Mr. Sherlock’s name, I see the address is “Mr Ashley Sherlock” <weboffinvsxxx@btinternet.com>.  Oooh! By the way…there is no To: line, meaning it was not sent directly to me.  Suspicious!
3. The reply-to address is different and does not appear to be official either.  Holding my mouse over this address, I see it is “fast deliveryservice002″ <fast_deliveryservice002@yahoo.com.hk>.
4. The body of the email is odd — it has little information, no logo, is in all caps, and doesn’t look very professional.  It does not reference anything on Fedex’s Web site, and has no specific link for package tracking information.  It also has no specific information about the contents of the attached file.

Ok, so that one was pretty easy.  However these scams are so common that FedEx has set up a whole fraud prevention site containing examples of the most common scams. They would like to remind their customers that “FedEx does not send unsolicited emails to customers requesting information regarding packages, invoices, account numbers, passwords or personal information.” and offer this advice:

Common Warning Signs of Online Scams

• Unexpected requests for money in return for delivery of a package, often with a sense of urgency.
• Requests for personal and/or financial information.
• Links to misspelled or slightly altered Web-site addresses (fedx.com, fed-ex.com, etc.)
• Spelling and grammatical errors or excessive use of capitalization and exclamation points.
• Claims that you have won a large sum of money in a lottery or settlement.
• Certificate errors or lack of SSL for sensitive activities.

Example 2

Now let’s try something challenging!

Well, that looks pretty good.  What’s wrong?

Let’s start at the top.

Woah!  This message is titled as if from UPS, but the address claims to be from USPS.com.  The letters might be close, but those are *not* the same. That’s one sign. Let’s see what else we can find.

That’s an awful lot of addressees, and they seem to be a random, alphabetically ordered list of Bryn Mawr addresses.  This is not directed to me, or even to me and several colleagues with similar roles.

In fact, this message is about UPS invoices for “my” account.  Wait!  Do I even have a UPS account that should be invoicing me?

Ok, let’s look at one more thing.  The text at the bottom seems pretty legit, but let’s take a look at some of the links.  I’ll hover my mouse over the link and…hey!

That’s not a UPS site.  In fact, all of the links in this email go to the same site, which is not UPS.

I guess it really is a fake.  Time to hit that spam button in the toolbar.

Well, that’s all the time we have today, kids.  Tune in next time to see more scams uncovered in….SCAMALOT!

For the most part, the Bryn Mawr WordPress theme works like any other WordPress theme, and all of the usual WordPress documentation here applies. However, it has a few features to make it look and function like the College website that require some additional documentation– menus and contact information.

Headers:

You must select a header for your blog to display correctly.

Select your header by going to Appearance->Theme Options. Most blogs should use the Bryn Mawr Only header, but there are options available for Bi-Co and Tri-co branding.

Contact Information

The Contact Us Info Box plugin must be activated with this theme.

Once it is activated, you may edit your contact information by going to Settings->Contact Us Info Box.

Enter contact information and format it with simple HTML:

Common HTML for contact information:

Line break: <br>
Email link: <a href="mailto:you@brynmawr.edu">you@brynmawr.edu</a>
Bold: <b>bold text</b>

Left Navigation menu

Add left navigation menus by going to Appearance->Menus

To create your first menu, click the “Create Menu” button. For additional menus, click the + tab.

Add WordPress pages or categories, or Custom Links (links to any web page) to your navigation menu using the panels on the left:

Drag and drop to reorder menu items as needed. When a menu is complete, click “Save Menu” to save your changes and make your menu available to add to the navigation.

Select the menu you want to appear first in the “Bryn Mawr Top Menu” dropdown. Select additional menus to appear below it (if applicable) in the next two dropdowns:

Click “Save” beneath Theme Locations to make your menu(s) display in your left navigation.

Breadcrumbs

Need breadcrumbs to link back to your department or office like this?

Under Appearance->Menus, Create a menu named “Breadcrumbs” and add Custom Links to it. Reorder items as needed, and click “Save Menu.” Your links will appear as breadcrumbs above the navigation menus, just as they do on Bryn Mawr web pages.

Left Navigation Buttons:

If you want callout buttons between the left navigation and contact information like this:

Activate the Left Navigation Button Plugin.

Then go to Appearance->Widgets

Drag the Left Navigation Button Widget into the Left Nav Callout Button widget area.

Then add your Link Text and Link URL to the widget.

The recommended maximum number of buttons is 3.

RSS Subscribe Button

To add an RSS subscribe button to the right column, activate the RSS Subscribe Button plugin, then go to Appearance->Widgets and drag the RSS Subscribe Button widget to the desired location.

Once logged in, you should see the Dashboard with the name of your club at the top like this:

If you just need to update your contact information, click on Posts in the left sidebar:

And hover your mouse over your Welcome post, then click “Edit.”

You should be on the edit screen for your Welcome post. In the editor, you can update your contact information just as if you were typing in a Word document or an email.

If you need more text formatting options, you can click the “Kitchen sink” button (as in “everything but the…”) to get big headings, indenting, underlining, paste from Word, and more!

To add a link to a Facebook page or email address, highlight the text you want to make into a link, then click the link button:

To link to a Facebook page or other website address (any address starting with http:// ), paste the address into the “URL” box and click “Update.”

To link to an email address, type “mailto:”  followed by the email address (for example, “mailto:help@brynmawr.edu”) in the “URL” box and click “Update.”

Once you are done updating your contact information, click “Publish”.

Want to see your changes? Click “View post” in the yellow box that appears, and you will be taken to your new and improved post!

Scammers are clever, and some of them are pretty good at making an email look like the real thing, at least on the surface.

So how do we distinguish a fake email from a real one?

Let’s start by comparing this fake Facebook notification to a real one. Names and addresses have been censored to protect the innocent. And the guilty. And you, because you should definitely not go to whichever questionable website this scammer wanted me to visit.

Fake:

Real:

They look pretty similar, right?

Now, we should always be careful about clicking links in emails, even if they look really legitimate. But there are a few clues that the first one is definitely a fake.

Do I even use this service?

First, let’s look at where this email went. This appeared in the spam filter for webmaster@brynmawr.edu. That email address doesn’t even have a Facebook, so that’s an easy one! FAKE! You may also get messages about banks you don’t use, packages you haven’t ordered, and suspiciously cheap Rolexes you don’t want.

But it gets a little trickier if you do have a Facebook account, or the bank in question, or you did order something online (hopefully not Rolexes that fell off the back of a truck, though).

Who sent this message?

So next, we look at the headers. A really good email scammer can make an email look like it’s coming from someone else– remember that! But this one didn’t bother. This email from “Facebook” is clearly coming from an AOL address. And it’s going to someone who isn’t me either! Probably because they emailed everyone at Bryn Mawr the same thing. BUSTED.

But just to be thorough, let’s look at the other red flags in this fake message.

Is the message suspiciously vague?

The body of the message is pretty incriminating, too. I’ve blanked out the name, but trust me, I don’t know this guy, so I definitely shouldn’t be getting Facebook messages about him. It’s also really generic (it’s not telling me he posted a specific photo or message), and there’s no profile photo or anything. Though this does look like Facebook’s image for users who don’t have a profile photo. TRICKY!

But if we look back at the real message, it’s much more specific– I see the name of one of my actual Facebook friends, their profile photo, and an actual comment that they would make.

Where are they trying to send me?

Another good thing to do is to see where these oh-so-clickable buttons would take us, WITHOUT CLICKING ON THEM. I can do this by hovering my mouse over the button to display the address it links to.

Sir or Madam Scams-A-Lot would like us to go to some Polish website (the .pl tells me it’s Polish) that is definitely not Facebook! Nie, dziękuję! No thank you!

If I hover over the real message’s button, it does actually appear to go to facebook.com , but if I want to be really safe, I will go to Facebook myself and check my messages there, rather than trusting any of these notification emails.

What happens if I push the (metaphorical) big red button?

But you want to know what would happen if I did click that scammer link, don’t you? Well, probably the website would make some attempt to look like Facebook in order to get you to log in with your Facebook username and password. Once you’d entered those, scammers would have control of your Facebook account, and use it to spread their scamminess to all of your friends! Yuck. The best case scenario at this point is that you have to change your Facebook password, apologize to all of your friends, frantically warn them not to click those scam links, and maybe tell them to change their passwords too. If you use your Facebook account to log into other sites, or if you’ve used your Facebook username and/or password for other sites, it gets… uglier.

The End. OR IS IT!?

That concludes today’s lesson in fake email detection. Try your new detective skills on the next notification email you get. You can read more about common online scams at OnGuardOnline.gov. And stay safe!

To change or reset your password, click here.

]]> http://techbar.blogs.brynmawr.edu/2012/12/05/changingresetting-your-password/feed/ 0