Posts Tagged ‘Security’

Porn is a Tricky Issue

Wednesday, November 10th, 2010

As an IT provider we work with many different types of people and a in variety of situations.  Some can be awkward at times.  Case in point is from an issue we dealt with earlier in the week.

It is very rare that we have a computer come back regarding a virus removal.  Usually we remove the virus and/or malware, secure the computer and the computer is good-to-go.  When we setup the computer for this client, he stated he wanted a less stringent security policy than one we normally use.

We received an urgent call from Mr. X’s office, his administrative assistant said he had a virus and it was very important we got over there to take care of it as quickly as possible.  While working on the system it became obvious the owner was using his computer to surf porn sites.   As the owner, he certainly has the right to do with his time whatever he chooses, and he doesn’t complain about us charging him for the almost periodic virus removals.

This does put our technicians in a very peculiar situation when they come upon an issue such as this. In all my years of working on computers, I only came upon a scenario such as this once, and while it wasn’t the owner, the man held a very high position in the company.

If someone wants to browse for porn, that is their own business.  But for the sake of their company’s security, they should not do it on a computer used for the business.

Enhanced by Zemanta

Breach Found in Android Password Security App

Wednesday, October 27th, 2010

One of the area which I believe Android phones are lacking is in security, especially when compared against BlackBerry devices.

A few weeks ago I began researching options to enhance the security of my Samsung Fascinate Galaxy S phone.  Several articles from well know and established magazines and Internet sites all had on their list a specific application, which I purchased and have been using for about ten days.

Yesterday I discovered a way to get around the security.  Last night I thought I found another way to bypass the security and tested my theory this morning, and it was another security flaw.

I wrote the company last night and will wait a week to see if the company responds before releasing their name.

A major point to be taken from this is many magazines and review sites do perfunctory evaluations.  In order to do a proper assessment, time must be spent.  Not an hour or two, but a substantial amount over an extended period.  It is the only way to do justice to the people who value their opinions.

Enhanced by Zemanta

Incoming search terms:

  • samsung galaxy i500 verizon bypass activation
  • galaxy s i500 bypass activation
  • i500 samsung skip activation
  • how to bypass verizon activation on samsung i 500
  • how to bypass verizon activation on galaxy s
  • how to bypass security on my smartphone
  • how to bypass i500
  • how to bypass activation screen on samsung i500
  • how to bypass activation screen on my samsung galaxy s
  • how to bypass activation samsung galaxy s i500

New LinkedIn Spoof Email

Wednesday, September 29th, 2010

There appears to be a new email circulating with the subject line of LinkedIn new messages, and LinkedIn Alert.  These look like they are coming from LinkedIn Communication.

The body of the email looks legitimate as it has a privacy policy link at the bottom along with copyright information.  The colors are also correct.

As with other similar types of attacks, the perpetrator is attempting to get the recipient to click on one of the links embedded in the email.  Proper protocol states you should never click on a link in a email unless you have absolutely no doubts whatsoever, as to the legitimacy of the email.

If you receive an email from LinkedIn indicating you have pending messages, the best thing to do is log into your LinkedIn account and check.

Enhanced by Zemanta

Incoming search terms:

  • linkedin spoof email
  • spoof email hitman

Is Your Website Vulnerable?

Monday, September 27th, 2010

This past week two hackers were convicted of defacing Comcast’s website in May of 2008.

Their methods were fairly simple, as they used social engineering to get a Comcast employee to give them user and password information to Comcast’s DNS account.  Once the hackers logged into Network Solutions (the company hosting the DNS entries), they just pointed the DNS record to their own website.

Whether someone actually gains access to a website or redirects visitors to a different site, the result to the business is the same; lost revenue.

What procedures does your company have in place which could prevent this type of security breach from happening?  Who has access to your DNS account information?  Are you using a strong password?  Have you made any employee changes which require a new password?

Answering these questions now could prevent a major incident in the future.

Enhanced by Zemanta

Tired of Dealing With Security Flaws?

Wednesday, June 9th, 2010

Adobe Reader.  The critical flaw could let an attacker (or attackers) take control of a computer.

Microsoft also released multiple software patches which address 34 flaws in Microsoft Office, Internet Explorer, Microsoft Windows, among others.

While Adobe will not be releasing the fix until tomorrow, our client’s who are using our Family Protection Services have already had a temporary fix put in place and will be receiving the updated fix automatically tomorrow.

Another benefit to our Family Protection Services is that we test the patches before they are applied.  Our goal is to Eliminate Frustration, not cause it, and because sometimes the cure is worse than the cause, we test everything.

Reblog this post [with Zemanta]

How Secure is That Business Computer?

Wednesday, May 19th, 2010

Many times when in businesses, I am asked for personal information.  Usually I do not provide it and if required to do so, I voice my concerns.  The person asking me for the information may think I am paranoid or difficult, but I am simply practicing what I preach.

How many businesses really take proactive steps to ensure they are protecting their customer’s data?  What are their browsing habits?  Do they visit gambling or pornography sites?  Is their anti-virus software up-to-date?  Do they have a firewall?  I could go on and on, but you get my drift.

It is our responsibility to keep our personal data secure.  Just because someone asks for information doesn’t mean you have to give it to them.

Reblog this post [with Zemanta]

Spyware and Malware Misconception #4

Wednesday, April 28th, 2010

The firewall and security tools provided in the Microsoft Operating System are all the maintenance and protection I need.

Again, this is a terrible misconception. Microsoft does NOT include ALL of the security features to protect your data from viruses, hackers, and data loss or prevent your PC from running slowly.

As a matter of fact, there is no one single vendor that provides ALL of the system security features you need to keep your computer and files safe from harm.

Security and protection from these malicious attacks takes a multi-faceted, layered approach.

Reblog this post [with Zemanta]

Spyware and Malware Misconception #3

Tuesday, April 13th, 2010

If my computer is working fine right now, I don’t need to perform maintenance on it.

This is probably one of the biggest and most deadly misconceptions that most computer users fall victim to. Computers are just like cars. If you don’t change the oil, change the filter, rotate the tires, flush the transmission, and perform other regular maintenance on your car, it will eventually break down and cost you FAR MORE to repair than the cost of the basic maintenance.

There are certain maintenance checks that need to be done daily (like virus updates and spam filtering), weekly (like system backups and a spyware sweep), and monthly or quarterly like checking for and installing security patches and updates, disk defrag, spyware detection and removal, checking the surge suppressor and the integrity of the hard drive, and so on.

Your computer repair technician should be adamant that you have regular maintenance done on your computer and should offer to set up automatic virus definition updates, spam filtering (to avoid viruses), and automatic system backups that are stored on an OFF SITE location (this protects the backup from fire, flood, or other natural disasters).

Lack of system maintenance is the NUMBER ONE reason most people end up losing valuable files and incurring heavy computer repair bills.

Reblog this post [with Zemanta]

Spyware and Malware Misconception #2

Monday, April 5th, 2010

It is my computer’s fault that I continue to get attacked by spyware, malware, and viruses.

In all cases, malware, spyware, and viruses are a result of some action taken by the user (you or a family member that uses your computer). Remember, cyber criminals are incredibly clever and gain access to your computer via some of the most innocent and common activities you are performing; that is why it SEEMS as though it is your computer’s fault.

For example, many of the clients we see simply downloaded an emoticon software program. Emoticons are the smiley faces and action characters that you see at the bottom of many people’s e-mails. In doing so they also (unknowingly) downloaded a payload of spyware and malware and before they knew it, could no longer use their computer due to the instability and pop-ups.

Other deadly programs to avoid are free “enhanced” web browsers, screen savers, and just about any “cute” programs you come across that are free to download. Always read the terms and conditions before downloading ANY program to look for clauses that allow them (the software vendor) to install spyware programs on your computer.

Installing programs is not the only way a hacker or malware program can access your computer. If you do not have the most up-to-date security patches and virus definitions installed on your computer, hackers can access your PC through a banner ad on the web that you accidentally clicked on or through an e-mail attachment that you opened.

Just recently, hackers have even been able to figure out ways to install malicious programs on your computer via your Internet Explorer web browser EVEN IF YOU DIDN’T CLICK ON ANYTHING OR DOWNLOAD A PROGRAM. Microsoft is constantly providing patches to their operating system software and all it takes is one missed update to leave you completely vulnerable.

Finally, you should COMPLETELY AVOID any and all peer to peer file sharing networks such as KaZaa and filezilla. These sites are the absolute WORST online activities you can participate in for your computer’s health because they are pure breeding grounds for hackers, spyware, malware, and other malicious attacks.

Reblog this post [with Zemanta]

“Stupid Company” Procedures

Monday, March 29th, 2010

Part of my job at HITman Services is researching software at our Clifton Park office.

Over the weekend I was trying out some new BlackBerry apps.  One which I thought was very interesting was Visible Vote.  I signed up for an account and started using the application.

Shortly thereafter I received an email from the company with my user name and password in the email.  I was under the impression that the practice of sending passwords in emails ended years ago, but obviously I was wrong.

When I sign up with companies I am not familiar with or whose security procedures I am unsure of, I use a throw-away password.  Which in this case turned out to be the right thing to do.

I sent the company an email regarding their antiquated security methods, and have yet to hear back.

Reblog this post [with Zemanta]