2016-04-07 WBKV Talking Points

This is the first time ever in 12 years of regular radio shows that I do not have a set agenda for the 15 minutes ahead of us.

Listeners, please call in with ANY kind of question you may have around your PC and MS Windows.

Other than that only the standards;

    - Use common sense!
    - Read and think(!) before you click.

    - Update ALL programs you use.

   - Ransomware.

    - Backup your data and your system!

And stay safe.

2016-03-24 WBKV Talking Points

Today nothing but viruses, malware and currently acute dangers.

• Ransomware (so far mainly from infectious MS-Office documents)
  Record ransom paid; 17 million US$ 
   -  -
• now infectious advertisements on BIG company web sites with 100s of millions of visitors every day:
  - -
  New York Times (nyt.com)
  AOL.com
  ESPN.com
  MSN.com (MicroSoft Network)
  NFL.com (yes, National Football League)
  TheWeatherNetwork.com
  TheHill.com
  Yahoo.com  and many more.

I feel like a prayer wheel:
   If you see advertisements in your web browser your computer is at risk!

Firefox web browser with Adblock Plus and WOT are the browser protections you should use!

No, not Goggle Chrome, Safari or Edge or Internet Explorer!

2016-03-10 WBKV Talking Points

Part 2: Stay Safe on the Internet

Be aware that trustworthy companies, especially Microsoft and it’s affiliates, will never contact you because of a supposed technical problem of any kind.

The following will definitely be scams:

• Phone calls
• Advertisements for technical support for any software product on search engines like Google, Yahoo or Bing
• Pop-ups for tech support from social web sites (Facebook! or LinkedIn)
• Pop-ups for tech support that promote phone based tech; these usually require a previous malware infection or an unsafe web browser.

Scam avoidance 101:

1. Never completely trust someone you don’t know who called you.
   Listen to them, if you like.
   
2. Ask questions, if you feel like it, but NEVER EVER give them access to your PC
   
3. NEVER EVER give them any payment information.
   
4. Tell them that you will let your local tech look into it (even if you don’t have one).
   
5. If the caller hangs up – good for you.
   
6. If he/she gets impolite or abusive it’s your time to hang up!

Afraid of a real problem? Do the research yourself or contact a trusted tech support person.

Chances are there’s nothing to see at all.

If you have handed over payment information, you’ve just given that information to a complete stranger. Immediately put your credit card or payment provider on fraud alert. If you allowed the scammer to access your computer things can get ugly. Do NOT use the computer; you usually have no idea what they did. You need a trusted technician to check out your machine.

This IS a common scam right now and the best defense is to not fall for it in the first place.

Another currently growing threat: MS-Word, Excel or Powerpoint files sent as attachments! When these files are opened you mostly see the request “... to turn protection on ...” or similar tricks. Don’t do it, don't believe it, it's a trick!  Many very nasty ransomware viruses use this trick! If you do not have a current backup YOU PAY! You either pay the crooks to get your files back and/or a trusted technician to re-build all the software on your computer.  And if you don't have install disks for Windows  - b.t.w. they do NOT come with computers any longer - you have even more problems.

Stay safe.

2016-02-25 WBKV Talking Points

Stay Safe on the Internet

1. Always install Operating System updates
    
2. Keep your installed applications up-to-date
    
3. Do not use the same password at every site
    
4. Install and be sure to update your anti-virus software
   
   
5. Additionally install a free anti-malware scanner and use it(!) regularly
    
6. Use a firewall (the FW built-in to Windows is good enough!)
    
7. Backup your data!
    
8. Enable the display of file extensions
    
9. Do not open attachments from people you do not know (especially Word files, Locky ransomware travels in Word files! Use MS's Word and Powerpoint viewers to check files)
    
10. Delete emails that say you won a contest or a stranger asking for assistance with their inheritance or money transfer
     
11. Watch out for online and phone support scams
     
12. Ignore and close web pop ups saying your computer is infected or has a problem (use ALT+F4)
     
13. Ignore and close web pop ups that pretend to be a Windows alert (use ALT+F4)
     
14. Some types of web sites are more dangerous than others
     
15. Be extra vigilant when using Peer-To-Peer Software (torrents!)
     
16. When installing software, watch for "bundled" tool bars and programs you don't want
     
17. Read the End User License Agreement (EULA) Lol, I know!  
    
     

2016-01-28 WBKV Talking Points

Through 20 years of effort, we have successfully trained every computer user
to use passwords that are hard for humans to remember,
but easy for computers to guess.

10 most used passwords in 2015 (truly a list of shame!):

123456
password
12345678
qwerty
12345
123456789
football
1234
1234567
baseball

Please, in the interest of privacy and safety, use a password manager and let it create long passwords.

Wifatch virus actively protects its victims from other forms of malware;
It infects routers, not computers;

It is written in the Perl programming language
It targets so far only ARM (83%), MIPS (10%), and SH4 (7%) processors
It connects infected devices to a peer-to-peer network

Basically it only infects devices that are not protected at all in the first place!

A Symantec (Norton) partner company in India uncovered as major player in the all too common technical support scam. 

Security Suites from AVG and Avast install dangerous browser add-ons!

McAfee and Norton tell Windows 10 users that they better use Internet Explorer, a browser so bad that Microsoft gave up on it!

For years I advise against ALL of the well known “security suites”, free or paid versions, no difference.

2016-01-14 WBKV Talking Points

For the normal home user: Upgrade to Windows 10 will be enforced by January!
Only two ways around:
1. Change Windows Update Settings. Not recommended because permanent user involvement required.
2. Use GWX Control Panel. See my blog Jan. 3^rd. 2016

AVG installs an extension in Google Chrome that opens computers to malware. DO NOT use Google Chrome and/or AVG “security products! See my blog Jan. 3^rd. 2016

First ransomware written in Java discovered. Please uninstall all Java. To my knowledge only Pogo.com still offers games written in Java.

Using Internet Explorer version 10 or older? Update it now! Support runs out NOW!
Better: Finally make the switch to Mozilla Firefox browser.

And a very recent true horror story about Dell's technical support and their willingness to handle a warranty case.

2015-11-05 WBKV Talking Points

Microsoft admits Windows 10 spying can not be stopped!
Reference here.

Microsoft will push Windows 10 onto computers with Windows 7 and 8.1.
The fun begins in January 2016 (or earlier if MS thinks it feasible).
Reference here.


We need to begin to talk publicly about alternatives to MS Windows! Yes, there are alternatives.
I promise an article about the alternative(s) in the near future.
And yes, in future this blog will talk about other computer operating systems but Windows.

What is the one, big major difference between Windows and the alternatives?
     Technically: Repositories are centrally managed.
     Economically: The alternatives are free; free as in no money.

2015-09-24 WBKV Talking Points

Microsoft “tricks” unsuspecting home users into installing Windows 10 (GWX program).

Since July 29^th. (release of Windows 10) MS has “invented” two levels of trickery to get users to upgrade to Win 10. None is documented.

Windows 10 “talks” to Microsoft even when all feedback options are turned off.
This IMHO is

• sleazy,
• secretive,
• dishonest,
• disrespectful,
• and two faced.

Even well known 'download web sites” use trickery to get unsuspecting users to allow installation of definitely unwanted programs. Stay away from – for example – cnet.com, download.com, softpedia.com and many others.
Download programs from the developer only.

2015-09-10 WBKV Talking Points

Malvertising “explodes”
2013 saw a more than 200 percent increase over 2012 according to the Online Trust Alliance; they logged some 12.4 billion malvertisement impressions.
2014 saw a 300 percent increase in malvertising over 2013 (ca. 37 billion).
2015 it increased by more than 260 % over 2014, in the first six months alone (over 100 billion/year)
Estimated damages 2015 alone about $1bn!

That is why I say: If you see advertisements your computer is NOT SAFE!

Belkin routers NOT SAFE!
No details about what models; all I can recommend is: Buy another brand router (I prefer Netgear)

Many top level domains on the internet are dangerous!
More than 95 percent of the hundreds of thousands websites in each of ten top level domains (TLDs) including .country, cricket, .science, .review, .zip and .party are flogging spam, malware, or adware.
Stay away!
Here are names of TLDs and percentage of infectuous sites:

1	.zip	100.00%
2	.review	100.00%
3	.country	99.97%
4	.kim	99.74%
5	.cricket	99.57%
6	.science	99.35%
7	.work	98.20%
8	.party	98.07%
9	.gq	97.68%	(Equatorial Guinea)
10	.link	96.98%

.

Parents need to wake up!
Of 1,494 apps and websites for children 67% collect children’s personal information;
half of these share personal information with third parties.
22% gather children's phone number and 23% allowed them to provide photos or video.

Don't buy Seagate wireless disk drives; they are not safe! (Secret hard-coded login!)

2015-08-27 WBKV Talking Points (August 27th 2015)

Windows 10

• For the unsuspecting home user I have decided to give clear warnings:
  Do Not Install Windows 10!
  In it's default settings Windows 10 does not respect even basic privacy.

Google Chrome's HTTPS extension can easily be turned OFF by visiting malicious web page!

• I can't say it often enough: Do NOT, I repeat DO NOT USE Google Chrome!
  About 50% of all malware infections I currently see happened when using Chrome!

Yahoo! slings viruses of he nasty sort – again!

• Original quote from The Register;
  “Yahoo! has been used to spread ransomware to Windows PCs almost exactly a year after he previous outbreak”.

Users of Apple anything: Check for updates!
Most anything from Apple is affected.

Do yo see advertisements?
Your computer IS NOT SAFE!
The Register: Internet lowlifes who used Yahoo! ads to infect potentially countless PCs with malware have struck again – using adverts on popular websites to reach millions more people. See this article.
Some affected web sites are ebay, Drudge Report, weather.com plus many others.
This campaign now resides on AOL.com For many years already I tell my customers

Do not use AOL, Yahoo, NetZero, Juno!

My customers have nothing to fear; IMHO a good ad-blocker is mandatory!

Hopefully listener calls with questions.

2015-08-06 WBKV Talking Points (August 6th 2015)

Windows 10

• If You use Symantec's Norton security software DO NOT UPGRADE to Win 10!
  Seriously broken Windows 7, 8.1 and 10 systems reported in Norton's forum.
   
• The vast majority of upgrades seems to go very well and smooth. Well dome Microsoft!
   
• BUT: There re some “rough edges” Microsoft needs time to smooth those. 

My original advice stands:  Wait and see!  There is plenty of time left to get the free upgrade.

Fake emails supposedly from Microsoft, telling people they are ready to download Windows 10.

BIG problem, they run CBT Locker which is MUCH WORSE than CryptoLocker.

Google Chrome's HTTPS extension can easily be turned OFF by visiting malicious web page!

• I can't say it often enough: Do NOT, I repeat DO NOT USE Google Chrome!
  
  About 50% of all malware infections I currently see happened when using Chrome!

Hopefully listener calls with questions.

2015-07-23 WBKV Talking Points

Windows 10

• You will get updates like it or not
  License agreement: 'receive these types of automatic updates without any additional notice'.
• Will be sold on USB drives (no need for DVD drive!)
  Seen on Amazon.com's pre-order page; US release date likely August 30^th
• Price for Windows 10 Home $119.99, for Windows 10 Pro $199.99

Adobe Flash player

A seemingly endless saga of bugs and updates.
Per July 20^th you should be at version 18.0.0.209; everything below that is potentially dangerous!
Mozilla on July 20^th temporarily blocked Flash Player in Firefox!

This month's Patch Tuesday fixed 59 vulnerabilities

Microsoft stops AV support for XP

Microsoft Security Essentials nolonger updated on Window XP
Yes, there are still about 180 million people using it!

WPA-TKIP can be cracked in an hour!
Check your WiFi setup.
I know many (older?) DSL routers that have ONLY WPA-TKIP; they need to be replaced!

Google Chrome to add RED SCREEN warning

Only for ads with malicious content, known malicious web pages and web sites.

CVS's photo web site hacked and off-line
Other possibly affected firms are Walmart, Costco, Tesco, Asda & Marks and Spencer; they all used Canada-based PNI Digital Media.
I recently tried the CostCo web service and was appalled by it's bad user interface; I ran away real quick.

Hopefully listener calls with questions.

2015-07-09 WBKV Talking Points (July 9th 2015)

Please click this link if you are looking for information on Windows 10.

Windows 10

• What
  It is an in-place upgrade.
  
  If you want to preserve your Windows 7/8 system DO NOT UPGRADE!
  
• When
  Anytime on or after July 29^th.
  
  
• Why
  If you want to get rid of Windows 8 annoyances and quirks.
  
  But you will have to learn a new interface - AGAIN! (boo Microsoft).
  
  
• Why not
  It does not bring anything I consider worth wile the risks of that change.
  
  There is no realistic simple way to avoid establishing a Microsoft account! Thus every Windows 10 user will become the “target” of the associated “advertisement ID”.
  
  The install process now even openly mentions the "advertisement ID"!
  
  

If your current Windows system is running stable and doing what you want to do I see no compelling reason to upgrade.

Hopefully listener calls with questions. 

As usual I welcome comments and suggestions right here in the blog. Thank you in advance.

Click here for a categorized Table Of Contents.

2015-06-25 WBKV Talking Points (June 25th 2015)

Please click this link if you are looking for information on Windows 10.

Emergency patch for Adobe Flash Player; details here (June 24 2015)

Windows 10 not necessary for Windows 7 users, IMHO at least:

• If you are still running Windows XP I can't help you.
   
• If you are running Windows Vista you better think about a new computer (mostly).
   
• If you have a stable Windows 7 system that does dependably what you want to do then don't upgrade to Windows 10.
  
  
• If you are still on Windows 8 you are long overdue to upgrade to 8.1.
   
• If you have Windows 8.1 then upgrading to Windows 10 will eliminate most of Windows 8's annoying quirks and shortcomings.

Beware of scam phone calls for "computer support". Your computer does NOT "report" about viruses, to nobody.
   -  This is an oldie (Feb. 2013) but still very actively exploited.

Curious about Windows 10? Microsoft has a free book "Introducing Windows 10 for IT Professionals here (scroll down just a few lines to see the title!).

2015-06-11 WBKV Talking Points (June 11th 2015)

Please click this link if you are looking for information on Windows 10.


Windows 10

• What
• When
• Why or
• Why not?

Hopefully listener calls with questions.

2015-05-14 WBKV Talking Points (May 14th 2015)

All Win 7 & 8 users can upgrade to Win10 for free – for one year (only?).

Then licensing will kick in? Home user be careful! I assume MS goes to a subscription model, that is yearly licensing. Win7 is paid for and good until Jan, 2020, Win8 until Jan 2023.
2016 is free but you would have to pay again for 2017, 18,19 (20, 21, 22).

New ways to infect computers:

“… emails ostensibly sent from legitimate companies with which we might or might not have had previous business. ... often includes a link requesting to update your account. The legitimate company has no idea it’s name is being abused. Anyone who is familiar with the company might click the link and immediately have their machine attacked.”

Even small company's names are now being used.

Most malware is directed at Windows, not Mac and a phenomenal rise in malware for Android phones; Android is an open system. When installing Android apps, you give permission for the app to use various system features. Nobody who installs Android (or Windows) software reads the EULAs and permission notices; we simply accept them with a click.”
Some outrageous statements and demands have been discovered in some EULAs by people who actually read them. A list of some of the funnier ones is here: makeuseof.com.

Malicious advertising on the rise. My customers are safe if they use the computer as I recommend, that is Firefox browser with Adblock Plus extension enabled.

Windows Server 2003 will go out of support after July 14^th. You have to update! Running an outdated server is hazardous to everyone connected to it!

If someone calls you and claims to be in any way affiliated with Microsoft IT IS A SCAM!

Download portals (cnet.com, download.com et al) are huge malware slingers.

Have your DNS settings been tampered with? Test here (but know what is correct…)

2015-04-30 WBKV Talking Points (April 30th 2015)

All Win 7 & 8 users can upgrade to Win10 for free – for one year (only?).

Then licensing will kick in? Home user be careful! I assume MS goes to a subscription model, that is yearly licensing. Win7 is paid for and good until Jan, 2020, Win8 until Jan 2023.
2016 is free but you would have to pay again for 2017, 18,19 (20, 21, 22).

Have an LG cell phone? Running LG's Monitor software? If Yes to both your PC is at risk! LG Monitor disables UAC (User Account Control)..

Dell System Detect: All versions older than 6.0.14 are easily hacked! DSD does not get automatically updated, even if Dell's updater is running!

Motorola's DOCSIS 3.0 SBG 6580 cable broadband modem very easy to hack! Could open your computer to the Internet. Arris, a spin-off brand, has same problem.

Verizon's Risk Assessment Team: 2 out of 3 times computer gets hacked reason was weak password. Runner-ups are clicking on links in emails and opening attachments.

If someone calls you and claims to be in any way affiliated with Microsoft IT IS A SCAM!

Download portals (cnet.com, download.com et al) are huge malware slingers.

Have your DNS settings been tampered with? Test here (but know what is correct…)

Adobe's cash-less bug bounty program: Can it ever work?

Symantec splitting security (Norton) from storage business. The beginning of the end (like HP)? It will take time; giants die slowly

Hackers move away from Java and to Adobe Flash. Check version and update if necessary! Per 4-29-15 version 18.0.0.95 is current. Beware: Many false downloads!

As usual I welcome suggestions and comments right here in the blog.

Click here for a categorized Table Of Contents.
 

2015-04-09 WBKV Talking Points (April 9th 2015)

Free Panda Ant Virus bricks computers! My advice: stay with MS Security Essentials or Defender.

Danger from USB drives: A newly demonstrated device has the potential to fry the USB port and possibly other components on motherboards, even the CPU!

A test for the Superfish bug is here, removal instructions are here.

Firefox vers. 36.0.1 has protection against SF, vers. 37 (current as of last week!) further improves certificate checking!

All Win 7 & 8 users can upgrade to Win10 for free – for one year (only?).

Then licensing will kick in? Home user be careful! I assume MS goes to a subscription model, that is yearly licensing. Win7 is paid for and good until Jan, 2020, Win8 until Jan 2023.
2016 is free but you would have to pay again for 2017, 18,19 (20, 21, 22).

Seagate reluctant to fix serious bug in some of their NAS drives.

More bugs in Adobe Flash Player! Per April 4 6:00AM officially released version is 17.0.0.134!

Many fake Flash Player updates! Users are tricked to download and install a fake plugin that then installs a key logger to collect log in info & passwords. User beware!

If anyone calls you and claims to be in any way affiliated with Microsoft IT IS A SCAM!

Download portals (cnet.com, download.com. softonic.com et al) are huge malware slingers.

Have your DNS settings been tampered with? Test here (but know what is correct…)

Adobe's cash-less bug bounty program: Can it ever work?

Symantec splitting security (Norton) from storage business. The beginning of the end (like HP)?

As usual I welcome suggestions and comments right here in the blog.

Click here for a categorized Table Of Contents.

2015-03-26 WBKV Talking Points (March 26 2015)

Free Panda Ant Virus bricks computers! My advice: stay with MS Security Essentials or Defender.

Danger from USB drives: A newly demonstrated device has the potential to fry the USB port and possibly other components on motherboards, even the CPU!

A test for the Superfish bug is here, removal instructions are here.

Firefox vers. 36.0.1 has protection against SF, vers. 37 will further improve certificate checking!

All Win 7 & 8 users can upgrade to Win10 for free – for one year (only?).

Then licensing will kick in? Home user be careful! Microsoft does not give anything away for free; that is the first concrete step to get us all to accept a licensing model, that means yearly payments.

Seagate reluctant to fix serious bug in some of their NAS drives.

More bugs in Adobe Flash Player! Currently (as of March 16) officially released version is 17.0.0.134!

Many fake updates! Users are tricked to download and install a fake plugin that then installs a key logger to collect log in info & passwords. User beware! 

If anyone calls you and claims to be in any way affiliated with Microsoft IT IS A SCAM!

Download portals (cnet.com, download.com. softonic.com et al) are huge malware slingers.

Have your DNS settings been tampered with? Test here (but know what is correct…)

Adobe's cash-less bug bounty program: Can it ever work?

Symantec splitting security (Norton) from storage business. The beginning of the end (like HP)?

2015-03-12 WBKV Talking Points (March 12 2015)

Superfish bug on some Lenovo laptops is a real risk:
A test for Superfish is here, removal instructions are here.
Firefox vers. 36.0.1 has protection against SF, vers. 37 will further improve certificate checking!

Confirmed sensation: Microsoft will allow all Win 7 & 8 users to upgrade to Win10 for free – for one year (only?). But then the licensing will kick in? A rented operating system? Home user be careful! Microsoft does not give anything away for free; that is the first concrete step to get us all to accept a licensing model, that means yearly payments. This way Microsoft will in the medium and long term make oodles of money more than by selling the software.

More dangerous bugs in Adobe Flash Player! Currently (as of March 12 2015) officially released version is 16.0.0.305! The catch: Many fake updates around! Mostly the user is tricked to download and install a fake plugin that then installs a key logger to collect log in info & passwords. User beware! 

Scam phone calls: Microsoft does not even know that we exist. MS's own advice:

• If anyone calls you and claims to be in any way affiliated with Microsoft IT IS A SCAM!
• Do not purchase any software or services.
• Ask if there is a fee or subscription associated with the “service.” If there is, hang up.
• Never give control of your computer to a third party unless you can confirm that it is a legitimate person you personally know and trust and/or are already a customer of.
• Never provide your credit card or financial information to someone claiming to be from Microsoft tech support.
• Take the caller’s information down and immediately report it to your local authorities.

Download portals (cnet.com, download.com. softonic.com et al) are huge malware slingers.

Have your DNS settings been tampered with? Test here (but know what is correct…)

Adobe's cash-less bug bounty program: Can it ever work?

Symantec splitting security (Norton) from storage business. The beginning of the end (like HP)?

FREAK bug (low quality encryption): Check your web browser here.
News March 12 2015: Fixed with this month's batch of updates for Windows

As usual I welcome suggestions and comments right here in the blog.

Click here for a categorized Table Of Contents.