We have met the enemy and he is us
If you're doing your best to keep your computer protected from cyber attacks - using a router firewall, running security software, keeping software current, etc. - please be aware, the main threat is closer at hand.
That threat is you. And by you, I mean all of us end users, sitting between the system and the keyboard. In most attacks, we are the primary means of exploit.
Social engineering
In many cases, cybercriminals prey upon our good nature to gain access to our computers and/or our private information. A term used to describe this is "social engineering."
Examples of social engineering include: phone calls to our homes or businesses offering bogus computer tech support; calls pretending to be an institution we belong to; or even calls supposedly from charities. These approaches are tried via email too, in which case they're called "phishing" attacks.
Don't be polite
Suspicion is the name of the defensive game here. Don't feel the need to be polite when you sense you're being probed in this manner. Disengage from the phone call. Delete the email. Close the webpage.
Take action
If you feel you may have been scammed, contact the actual institution or business immediately to notify them. If you feel an online account has been compromised, change your password at once. If your computer has been hacked turn it off, unplug from the Internet, and call trusted local tech support asap.
In sum, to quote that famous Pogo cartoon line: "We have met the enemy and he is us." We have to change our behavior to keep ourselves safer from cybercrooks. All the software and hardware filters we use are just aids and deterrents, not final solutions.
Thanks for reading.
Sam
---
If you haven't already, you can subscribe to our email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email list" in the request form, then click Send.
Be Careful with Email Attachments and Links
I know you've heard this many times, but it's easy to fall prey to scammers while we're zipping through our email.
Malware is commonly activated when people click on an email attachment or a link that launches the malware.
So don't open attachments or click on links unless you're certain they're safe, even if they come from a person or company you know. It's better to err on the side of suspicion. If you're not sure of the source, call the person or company.
Be especially wary of attachments with sensational names, emails that contain misspellings, or emails that try to entice you into clicking on a link or attachment (for example, an email with a subject like that reads, "Hey, you won't believe this picture I saw of you on the Internet!").
We live in an age where one click of the mouse can ruin our day. Don't let yourself become another cybercrime victim. Like they teach us when we learn to drive, be defensive. Look out for yourself.
Thanks for reading,
Sam
---
If you haven't already, you can subscribe to our email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email list" in the request form, then click Send.
Be Careful Which Data You Store on the Internet
What's the issue?
Photos, videos, emails, documents, spreadsheets, etc. - all the stuff you create on your digital devices and post or store on the Internet - are accessible to other people, and not just people you've shared them with.
The internet is a public network and as such is a tempting target for hackers. Whether it's called the Web, the Net, or the Cloud, all services are running on a public platform.
Cloud storage companies that host your email, your personal or company files, your precious pictures of family, etc. are usually doing their best to limit access to authorized users only, i.e. those users having passwords or other means of authentication.
But the potential to score some valuable confidential data is very tempting. So cyberthieves are thriving by exploiting weak points in software all across the internet.
Why is software so vulnerable?
Software - whether a web browser, PDF reader, email program, cloud application, etc. - is inherently insecure the moment it's released, whether it's a free or paid version.
Computer code is too complicated to be perfectly debugged. That's why all software companies and programmers issue fixes, patches, updates, etc. for their programs. There's no way around it.
Given this fact, and the growing opportunity and enthusiasm for cybercrime, we users must be suspicious from the outset whenever we do anything online, especially posting, storing, and sharing our data.
How to improve protection of your data?
First decide what's confidential. Usually this includes anything you don't want others to see besides yourself or trusted people. Confidential data can range from the obvious - a bank account number - to the seemingly innocuous, such as a carefree photo taken of you at the beach. Data is like a gun; its potential for good or ill depends on the intent of the person wielding it.
If you are running a business and need to store confidential data online for staff access make sure there is strong encryption during the transmission and storage of the data. (I will write more about encryption in a subsequent article.)
When should you take action?
As soon as possible, take stock of the data you store online.
After you determine which files you consider confidential, decide your risk tolerance for storing those files online. Translation: If the site storing the files got hacked, how vulnerable would you feel?
And this begs the question: Why are you storing any confidential data online? (There are secure ways of storing passwords, data, account info, etc. using websites like lastpass.com)
Where can you find more info on this topic?
Here's an article posted on a Boston University page outlining the concerns of storing data in the cloud and which addresses the importance of encryption.
Who can help?
If this all seems too technical but you are concerned and want to be better protected, you may want to hire an IT consultant. This is an especially good investment if you are responsible for data security in an office environment.
In Sum
We don't leave our car doors unlocked or windows rolled down in public parking lots. We don't leave our home doors and windows unsecured when we're on vacation. We have some common sense in these areas. In this new digital age, we need to develop common sense concerning our private data. Not doing so can be very damaging to our finances, our identity, and our reputation.
Thanks for reading.
-Sam
Deterring Theft of Your Home and Office Computers
What's the issue?
It seems whenever we tune into the news these days we hear of another computer system hacking. Whether it's an attack on big business, government, or celebrities, the black hat hackers are chalking up victories. But there are less techie ways of getting to our confidential data.
Why should you care?
Because it's so easy to be ripped off. A criminal could find the opportunity to pick up your computer (or phone or tablet) and walk off with it. Cyber theft can be that simple.
Speaking from my perspective on Hawaii Island it seems most homes and businesses don't have alarm systems. Most don't seem to have very good locks on their doors either. I have yet to see a laptop locked to furniture. The deterrents to computer theft around here are low.
So it would be quite easy for a thief to acquire a computer in these environments, such as after business hours, or when the homeowner is away. And once the computer is in hand, even if it's password protected, any data on that computer is compromised. (Encrypting the data does boost your security.)
Expect the worst! Reasons for stealing a computer range from a disgruntled employee, a mad ex-spouse or partner, a desperate drug addict, etc.
How to protect yourself?
If you have confidential info on your computer, and you could imagine a scenario where someone would steal the system, please think of ways to counter that.
Installing good door and window locks is a start. For a business, an alarm system is a good investment. If you are leaving for the weekend or going on vacation, you can hide your computer. There are cord locks you can install, which latch the computer to furniture (it's a deterrent). You can lock a server in a closet or cage. There are many approaches to boost security.
Put on the hat of a thief and survey your home or office for ways a computer could be stolen. Think how it would affect you if the computer were stolen. Then take appropriate action to protect that asset.
When should you do it?
ASAP! The word is out on the "cyberstreet" that stolen data is a commodity. Don't wait until after you're a victim.
Where can you find more info on this topic?
Here's a website that offers theft prevention tips.
Who can help?
Ask a friend or family member or IT consultant to help assess your computer theft vulnerabilities. Two heads are better than one to craft defenses.
In Sum
The nexus between the online and offline worlds provides many angles for the criminals. Let's keep our guard up so we don't become another statistic of cyber crime.
Thanks for reading. You're feedback is appreciated!
Aloha, Sam
You can subscribe to email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email list" in the request form, then click Send.
Offline Data Security - A Very Good Place to Start
What's the issue?
All the buzz these days in computer security is about protecting your digital data (computer-generated data) from hackers, which is a very important concern. But confidential digital data that can be exploited online (on the Internet) can actually originate offline.
Why care?
It can be even easier for a criminal to steal your confidential information offline instead of trying online, and then use that info online to cause you much grief.
Take the contents of your wallet for example. Your identity and your financial assets can be exploited by a crook who obtains the items in your wallet--namely, your drivers license, bank and credit cards, membership cards--then finds a buyer for these items on the Internet. (There is a thriving online market to exploit these assets.)
With the info on your precious plastic cards a cyber (computer) criminal can open new accounts in your name, make purchases, and impersonate you. Depending on the creativity of the cyber thief you could be in for a long struggle to mitigate damage to your identify, reputation, and/or finances.
How to protect yourself?
A good habit is to take stock of the confidential items in your wallet. Photocopy and/or write down all pertinent information on the front and back of each card. Then store this record in your home safe. In the event your wallet goes missing you can refer to this record to notify the appropriate institutions and authorities immediately to stymie criminal activity.
Also, the fewer items in your wallet the better. And don't carry your Social Security card, account numbers, or passwords in your wallet. Let’s not give the bad guys extra ammunition.
When should you do it?
A monthly check and update of your wallet's contents is best. After you first make the record it only takes about five minutes to note what's been added or removed from your wallet. When done, put the record back in your safe.
Where can you find more info on this topic?
The Better Business Bureau of Hawaii website has some good tips about identity and financial theft. Click here to learn more.
Who can help?
If you are elderly, ask a trusted friend or family member to assist. Seniors are frequently the victims of identity theft and financial scams. You can also ask your bank and credit card companies how they can help protect you in the event of theft.
In Sum
The bottom line is to be wary of theft in the offline and online world, and minimize our information exposure so cyber criminals can't use the latest tricks to their advantage and our anguish.
Thanks for reading. You're feedback is appreciated!
Aloha, Sam
P.S. You can subscribe to emailed computer tips by visiting www.kokuadigital.com and entering your name, email, and "add to email" in the request form.
