How to stay safe in 2017 - Short List

Here is a short list of in my experience the most important steps you can take to keep your computer and your data safe. have I have added e few remarks for clarification.

1. Update your software.
   Not only Windows but all other regularly used programs as well;
   for a Windows PC this includes (but is not limited to)
   -   Adobe Flash (beware of fake download sites!)
   -   Adobe Shockwave
   -   Web browser(s)
   -   Email client
   -   Java (if installed; mostly Java is not needed at all!)
   -   Office programs
   We always have to keep in mind that some programs still don't update automatically and quietly in the background! Checking manually hardly ever has hurt anything.
    
2. Back-up to an external hard drive.
   Done regularly and correctly this currently is the only protection against ransomware viruses!
    
3. Use a password manager.
   For single machines see Keepass, for more than one machine see LastPass and include all cell phones and tablets in the count!
      
4. Use a unique password for every account.
   Everybody has many, many accounts; you need a password manager!
    
5. Use random passwords
   Easily done only with a password manager!
    
6. Turn on two-step verification everywhere you can.
   If you have a cell phone that you really use, otherwise this is pretty useless.
    
7. Read and think(!) before you click.
   "My" first commandment for safe computing.
    
   
8. Enable full-disk encryption
   On a single home computer? Only protects your data when the machine gets stolen.
    
9. Put a six-digit PIN on your phone and set the phone to wipe it's contents if the PIN is guessed wrongly too many times.
   

Do you have questions to any of that? Please feel free to ask them in the comments, I will reply. Maybe not immediately but I will.

Stay safe.

2015-06-25 WBKV Talking Points (June 25th 2015)

Please click this link if you are looking for information on Windows 10.

Emergency patch for Adobe Flash Player; details here (June 24 2015)

Windows 10 not necessary for Windows 7 users, IMHO at least:

• If you are still running Windows XP I can't help you.
   
• If you are running Windows Vista you better think about a new computer (mostly).
   
• If you have a stable Windows 7 system that does dependably what you want to do then don't upgrade to Windows 10.
  
  
• If you are still on Windows 8 you are long overdue to upgrade to 8.1.
   
• If you have Windows 8.1 then upgrading to Windows 10 will eliminate most of Windows 8's annoying quirks and shortcomings.

Beware of scam phone calls for "computer support". Your computer does NOT "report" about viruses, to nobody.
   -  This is an oldie (Feb. 2013) but still very actively exploited.

Curious about Windows 10? Microsoft has a free book "Introducing Windows 10 for IT Professionals here (scroll down just a few lines to see the title!).

Important Update for Adobe Flashplayer

Please click this link if you are looking for information on Windows 10.

Adobe released an emergency patch for it's ubiquitous Flash Player.

You should now be at least on version 18.0.0.194.

You can check the version in Control Panel, Flash Player; click on the Update tab.

Caution: Adobe gets paid to coax you to download and install McAfee Security Scan.

If you run your computer like I recommend (and may have set up) then you do not need/want this blind passenger!

Adobe's update web page looks like this:

Watch for the always pre-selected check box (big red arrow); please DE-select the check mark before you click on "Install now".

As usual I welcome suggestions and comments right here in the blog.

Click here for a categorized Table Of Contents.

2015-05-14 WBKV Talking Points (May 14th 2015)

All Win 7 & 8 users can upgrade to Win10 for free – for one year (only?).

Then licensing will kick in? Home user be careful! I assume MS goes to a subscription model, that is yearly licensing. Win7 is paid for and good until Jan, 2020, Win8 until Jan 2023.
2016 is free but you would have to pay again for 2017, 18,19 (20, 21, 22).

New ways to infect computers:

“… emails ostensibly sent from legitimate companies with which we might or might not have had previous business. ... often includes a link requesting to update your account. The legitimate company has no idea it’s name is being abused. Anyone who is familiar with the company might click the link and immediately have their machine attacked.”

Even small company's names are now being used.

Most malware is directed at Windows, not Mac and a phenomenal rise in malware for Android phones; Android is an open system. When installing Android apps, you give permission for the app to use various system features. Nobody who installs Android (or Windows) software reads the EULAs and permission notices; we simply accept them with a click.”
Some outrageous statements and demands have been discovered in some EULAs by people who actually read them. A list of some of the funnier ones is here: makeuseof.com.

Malicious advertising on the rise. My customers are safe if they use the computer as I recommend, that is Firefox browser with Adblock Plus extension enabled.

Windows Server 2003 will go out of support after July 14^th. You have to update! Running an outdated server is hazardous to everyone connected to it!

If someone calls you and claims to be in any way affiliated with Microsoft IT IS A SCAM!

Download portals (cnet.com, download.com et al) are huge malware slingers.

Have your DNS settings been tampered with? Test here (but know what is correct…)

2015-05-04 WTKM Talking Points (May 4th 2015)

All Win 7 & 8 users can upgrade to Win10 for free – for one year (only?).

Then licensing will kick in? Home user be careful! I assume MS goes to a subscription model, that is yearly licensing. Win7 is paid for and good until Jan, 2020, Win8 until Jan 2023.
2016 is free but you would have to pay again for 2017, 18,19 (20, 21, 22).

Macro malware is making a comeback with one nineties nasty infecting half a million computers, Microsoft says. It's 2015 and half a million people still click on stuff we knew was bad in the '90s. Users should stick to MS's decade-old advice and avoid executing macros

Have an LG cell phone? Running LG's Monitor software? If Yes to both your PC is at risk! LG Monitor disables UAC (User Account Control)..

Dell System Detect: All versions older than 6.0.14 are easily hacked! DSD does not get automatically updated, even if Dell's updater is running!

Motorola's DOCSIS 3.0 SBG 6580 cable broadband modem is very easy to hack! Could open your computer to the Internet. Arris, a spin-off brand, has same problem.

Verizon's Risk Assessment Team says that 2 out of 3 times a computer gets hacked the reason was a weak password. Runner-ups are clicking on links in emails and opening attachments.

If someone calls you and claims to be in any way affiliated with Microsoft IT IS A SCAM! 

Download portals (cnet.com, download.com et al) are huge malware slingers.
 
Have your DNS settings been tampered with? Test here (but know what is correct…).

Hackers move away from Java and to Adobe Flash. Check version and update! Per 5-03-15 version 18.0.0.95 is most current. Beware: Many false downloads!

2015-04-06 WTKM Talking Points (April 6th 2015)

Free Panda Ant Virus bricks computers! My advice: stay with MS Security Essentials or Defender.

Danger from USB drives: A newly demonstrated device has the potential to fry the USB port and possibly other components on motherboards, even the CPU!

A test for the Superfish bug is here, removal instructions are here.

Firefox vers. 36.0.1 has protection against SF, vers. 37 (current as of last week!) further improves certificate checking!

All Win 7 & 8 users can upgrade to Win10 for free – for one year (only?).

Then licensing will kick in? Home user be careful! I assume MS goes to a subscription model, that is yearly licensing. Win7 is paid for and good until Jan, 2020, Win8 until Jan 2023.
2016 is free but you would have to pay again for 2017, 18,19 (20, 21, 22).

Seagate reluctant to fix serious bug in some of their NAS drives.

More bugs in Adobe Flash Player! Per April 6 officially released version is 17.0.0.134!

Many fake Flash Player updates! Users are tricked to download and install a fake plugin that then installs a key logger to collect log in info & passwords. User beware! 

If anyone calls you and claims to be in any way affiliated with Microsoft IT IS A SCAM!

Download portals (cnet.com, download.com. softonic.com et al) are huge malware slingers.

Have your DNS settings been tampered with? Test here (but know what is correct…)

Adobe's cash-less bug bounty program: Can it ever work?

Symantec splitting security (Norton) from storage business. The beginning of the end (like HP)?

As usual I welcome suggestions and comments right here in the blog.

Click here for a categorized Table Of Contents.

2015-03-12 WBKV Talking Points (March 12 2015)

Superfish bug on some Lenovo laptops is a real risk:
A test for Superfish is here, removal instructions are here.
Firefox vers. 36.0.1 has protection against SF, vers. 37 will further improve certificate checking!

Confirmed sensation: Microsoft will allow all Win 7 & 8 users to upgrade to Win10 for free – for one year (only?). But then the licensing will kick in? A rented operating system? Home user be careful! Microsoft does not give anything away for free; that is the first concrete step to get us all to accept a licensing model, that means yearly payments. This way Microsoft will in the medium and long term make oodles of money more than by selling the software.

More dangerous bugs in Adobe Flash Player! Currently (as of March 12 2015) officially released version is 16.0.0.305! The catch: Many fake updates around! Mostly the user is tricked to download and install a fake plugin that then installs a key logger to collect log in info & passwords. User beware! 

Scam phone calls: Microsoft does not even know that we exist. MS's own advice:

• If anyone calls you and claims to be in any way affiliated with Microsoft IT IS A SCAM!
• Do not purchase any software or services.
• Ask if there is a fee or subscription associated with the “service.” If there is, hang up.
• Never give control of your computer to a third party unless you can confirm that it is a legitimate person you personally know and trust and/or are already a customer of.
• Never provide your credit card or financial information to someone claiming to be from Microsoft tech support.
• Take the caller’s information down and immediately report it to your local authorities.

Download portals (cnet.com, download.com. softonic.com et al) are huge malware slingers.

Have your DNS settings been tampered with? Test here (but know what is correct…)

Adobe's cash-less bug bounty program: Can it ever work?

Symantec splitting security (Norton) from storage business. The beginning of the end (like HP)?

FREAK bug (low quality encryption): Check your web browser here.
News March 12 2015: Fixed with this month's batch of updates for Windows

As usual I welcome suggestions and comments right here in the blog.

Click here for a categorized Table Of Contents.

 

2015-03-02 WTKM Talking Points (March 2nd 2015)

Superfish (on some Lenovo laptops) is a real risk!
A test for Superfish is here, removal instructions are here.

Confirmed sensation: Microsoft will allow all Win 7 & 8 users to upgrade to Win10 for free – for one year (only?). But then the licensing will kick in? A rented operating system? Home user be careful! Microsoft does not give anything away for free; that is the first concrete step to get us all to accept a licensing model, that means yearly payments. This way Microsoft will in the medium and long term make oodles of money more than by selling the software.

More dangerous bugs in Adobe Flash Player! Current officially released version is 16.0.0.305! The catch: Many fake updates around! Mostly the user is tricked to download and install a fake plugin that then installs a keylogger to collect log in info & passwords. User beware! 

Renewed warning: CryptoWall (new CrypotoLocker variant) spreads through advertising networks.
When you see advertisements your computer is not sufficiently protected or it is already infected with malware!

Finally: Microsoft takes on scam tech support phone call organizations (PDF).
If MS succeeds I expect the crooks to move off-shore and do the same from India.
Microsoft Digital Crimes Unit attorney Courtney Gregoire has an article and a video about these scams on her blog. Here is Ms. Gregoire's advice:

• If anyone calls you and claims to be in any way affiliated with Microsoft IT IS A SCAM!
• Do not purchase any software or services.
• Ask if there is a fee or subscription associated with the “service.” If there is, hang up.
• Never give control of your computer to a third party unless you can confirm that it is a legitimate person you personally know and trust and/or are already a customer of.
• Never provide your credit card or financial information to someone claiming to be from Microsoft tech support.
• Take the caller’s information down and immediately report it to your local authorities.

The supposed hack attack on French news media (after Charlie Hebdo shooting) was no attack at all. It was a simple server cockup.

In Canada it is now illegal to install computer programs without consent. Why not in the US?

375 of the 500 largest companies do not protect their web sites from typosquatters. That causes real danger when you mistype a web address in your browser. Be careful!
As usual I welcome suggestions and comments right here in the blog.

Click here for a categorized Table of Contents.