Downsizing Your Online Identity

Downsizing Your Online Identity
We all have the physical identity we present with our bodies and attire when we interact with others. There's another kind of identity we in 21st century possess as well: the one we create online. It's a composite of our social networking accounts, our email accounts, our memberships with various online services, etc. The more accounts we have, the more data and detailed "personality" we create for ourselves, and hence a unique online identity.

Carnival junkies
We have only ourselves to blame as we fall victim to the dizzy carnival-like playground we call the Internet. We get dazzled by the bright lights, the colors, the clamor, the intense energy, and so what do we naturally do? We buzz like moths near the flame. It's instructive to get our wings singed a few times to help wake us up - in this case to the risk of being hyper-exposed online, to growing an overinflated online persona. The more exposed you are, the easier it is for hackers to target you.

Zap the unwanted accounts
The good news is the online identity that we have wittingly or semi-consciously created for ourselves can also be dismantled by us, the owner of the identity. We have the power to close our accounts at any time. Goodbye Facebook! Sayonara AOL! Adios newsletter subscriptions! There are consequences and trade-offs, but we can do it.

Withdrawal pains
The real challenge in downsizing one's online identity is the same any type of addict goes through when breaking free of that which usurps willpower: withdrawal pains. Physical pains are bad enough for drug addicts. But it's the emotional ones that linger, that haunt and torment, because the ego has to redefine its identity, which to any ego is an existential threat.

Google yourself
If you're up to the challenge of downsizing your online ego then besides scrapping any obvious and unwanted aspects of your persona try Googling yourself to learn what else the Internet knows about you. Then start unplugging from places you don't want to be.

It may take time to reduce your imprint, but for the average Joe and Jane, not too long. After all, a carnival doesn't want bystanders, it wants big spenders. Save your ticket money for the attractions you like best, not what others want you to see and do.

Get off the hackers' radar
As mentioned earlier if you head towards the down low you'll also reduce your visibility to hackers, which will lessen your anxiety and make life more fun, whether online or off. In the long run, that's a better high than any carnival can provide.

Here's a related article with step-by-step guidance on removing yourself from high profile sites:

https://www.cnet.com/how-to/remove-delete-yourself-from-the-internet

Thanks for reading!
-Sam

Make Patching a Priority

Make Patching a Priority

There are three things I recommend you do to keep your devices and software better protected from online attacks. 

1. Update
2. Update
3. Update
 
Yes, no joke. 

Don't Get Exploited
A top priority of hackers is to exploit known vulnerabilities in software and hardware devices. Software vendors like Microsoft, Apple, Adobe, etc. and hardware manufacturers like Cisco, Netgear, Linksys, etc. release updates a.k.a. patches to fix security holes and bugs. Microsoft, for example, releases patches on a regular schedule for Windows - the second Tuesday of each month. That day is called "Patch Tuesday" in the industry.
 
Updates for Mobile Devices
On our mobile devices, updates should be notifying you, or automatically updating if you have the auto-update feature enabled. 

Be Proactive on Your Computers
On your computers you will get notifications for updates to programs such as Adobe Reader, web browsers, security software, iTunes, etc. However, not all programs notify you. So it's up to you to be proactive. Check in a program's menus for the command to check for updates. This is often under the Help menu.  

Patching the Internet of Things (IoT)
As I alluded, it's not just software that needs patching; hardware devices like routers do as well, as do printers, watches, X-boxes, smart-TVs, Internet-connected cameras, etc. Any device connected to the Internet, or which can connect to it in order to download data or programming, such as medical devices (which aren't always online), is part of the "Internet of Things", or IoT. Almost every IoT device can and should be patched when the fixes are released. 
 
When in Doubt, Get Help
So, as laborious as it seems, and can be, do NOT ignore the update notices of software you trust, and notices for your IoT devices. If you are ever in doubt, ask a trusted IT guy/gal or local store, or check the vendor's website directly, such as hp.com, adobe.com, etc. Don't just Google "update my such and such". That's risky, because there are bogus sites out there that will infect your system or scam you.
 
Updates Change Features
Here's one caveat to installing updates, especially on Apple devices: Updates can change the appearance, features, and security requirements of the system. Apple, like all vendors, will implement changes per their discretion, which is not always pleasing to the end user. 

Older, Incompatible Systems
Also, some older hardware and operating systems won't accept the latest software updates; they are no longer compatible with the latest release. Ultimately, this can translate into a vulnerability for a system with known issues, like old versions of Windows, which can't be patched. It's best to keep such computers offline, or replace them. Otherwise, each is a honey pot for a hacker.   

Thanks for reading!
-Sam

---

If you haven't already, you can subscribe to our email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email list" in the request form, then click Send.

Update Your Router To Boost Security

Update Your Router To Boost Security

You know those movies depicting the days of yore when the royals lived in a castle? Such a flick wouldn't seem authentic without a scene of people passing through the castle gates, complete with a drawbridge and a moat. Given such castles were built of solid, high walls, it's implied there was no way in or out except through the gate. 

Your modem is the castle gate
In the kingdom of the Internet, as far as homes and small businesses are concerned, there's only one way in and out, only one castle gate: the modem. On Hawaii Island, the modems are provided by Hawaiian Telcom, Spectrum, satellite internet providers, or cell providers like AT&T and Verizon. 

So the modem is THE conduit to the Internet. No modem, no Internet. (Here I'm limiting the scope to not include connecting on a cell phone to the Internet via a cellular data plan.)


Modem/router
Some of these modems are actually a modem/router combo. The router component is what allows multiple users to connect through one modem via a wired or wireless connection. Some folks have a modem from the telco provider and a router they bought off the shelf, like a Linksys or Netgear brand.

Castle gate, but no protection
Now here my catle gate analogy breaks down a little, becuase a modem by itself affords virtually no protection against Internet crooks. It's actually the router that provides gate keeping. The basic protection a router affords is a firewall, but there are other security features like WiFi encryption, etc. 

I highly recommend not connecting a computer to the Internet directly via a modem, even if you have only one computer. Install a router between your computer and the modem.  
Hacking Targets
Given that we depend on our routers for security, it's very important to know they are regularly the target of hacking. Cybercrooks are constantly on the lookout for router vulnerabilities. The cheaper and older a router is, the less likely the manufacturer is to "patch" it, which means to keep the software up-to-date against known threats. 

How to secure your router
What can you do to keep your router as secure as possible? There are several things, but one of the most important and oft-neglected is to update the firmware (the router software). The most common way to do this is login to your router via the router's IP address in a web browser, then locate the update option. Note: Only do this when you can afford for the router to be shut down, because the firmware update will reboot the device. You can check for specific firmware instructions on the vendor's site for your router, such as linksys.com or netgear.com, etc.

Additionally, if your router is older than two years, I suggest replacing it. A router's performance decreases over time; and as mentioned, security can be compromised if vendors don't keep patching the defects.
 
Get some help
Be sure to get some help configuring a new router, because out of the box it's not optimally secure. If the router is provided by your telco, they will upgrade you to the latest model for free. 
 

Here's another article with more info and tips on this subject:

https://www.lifewire.com/how-to-upgrade-your-wireless-routers-firmware-2487671

Thanks for reading!
-Sam

---

If you haven't already, you can subscribe to our email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email list" in the request form, then click Send.

Are You Over Exposed?

Are You Over Exposed? 

I'm not referring to what you do or don't wear in public. Here I'm talking about what personal data you expose online. 

Take stock of your exposure
How many email accounts do you have? How many social networking accounts? How many media outlets do you subscribe to? These are things to take stock of. 

Your risk of getting hacked

The more software services you have running on your computer (programs you have installed) that connect to the Internet, and the more accounts you have with various online entities, the greater your risk of getting hacked or exploited. 

Why is this? Because it’s a numbers game – sooner or later one of the services you run or access will be hacked. Depending on what information you gave them, you may become a target on hacked data black market. 

How to reduce your exposure?

My suggestions are as follows:

1. Give careful thought to whom you give your email and contact info. Imagine what would happen if they got hacked. What data would the hacker have of yours? 

2. Uninstall any software on your computer you no longer use. Software programs are reaching more than ever out to servers for updates and other communication. These programs can be a beachhead into your computer if compromised.

3. Close online accounts of any sort that you no longer use. If you have an old email that you might occasionally need to reference, then at least suspend the service so no new mail comes in.

4. Use a strong spam filter for your email, and unsubscribe to any services you no longer use that show up on your spam list. (You can label anything that comes in as spam and sort it out when convenient.)

5. Use a unique password for EVERY SINGLE ONLINE ACCOUNT. If you share passwords between accounts and one account gets hacked, the bad guys and gals will try that password on any other accounts linked to you that they can locate. (You may like to read my July blog post about passwords.)

6. Pay attention to news reports related to any accounts you have—email, banking, social networking, etc.—and act promptly if their system has been compromised. Usually the most critical action to take is changing your password. Then start monitoring the account for unusual activity. 

One last note: Parents, be nosy about what your kids are doing on their devices, and teach them about safety and security. They rely on us for such things in the offline world; we should help protect them online as well.   


Thanks for reading!

Sam

The Hazards of Spam

The Hazards of Spam

Spam used to be merely an annoyance: junk email ads for meds, romance, degrees, etc.  Now it has graduated from annoyance to outright danger. The links provided in spam can lead you to a poisoned website where hackers are positioned to infect your computer.  

A tool of hackers
The hacker-run sites may be interactive - enticing you to click something to take further action, which infects your computer. However, in some cases just visiting the site could plague your computer with browser hijacking or a Trojan download. So, as you've heard from me and other IT pros, be very, very suspicious of each and every email you get. When in doubt, delete it!      

How did the spammers find you?
You might be wondering how spammers get your email. There are several sources: chatrooms, websites, customer lists, newsgroups, and viruses which harvest users' address books to name a few. A certain class of bots, referred to as "collection bots" also sends spam to entire domains in order to identify the non-bouncing email addresses, which are then added to a commercial spam database. Nice, huh?

How do the spammers make money? 
It used to be that if a small percentage of users clicked the junk mail, and then purchased the product advertised, that would suffice. The cost of business for spamming is very low, as millions of prospects can be reached by sending numerous bulk emails. Now, as mentioned above, spammers and their network affiliates can make money from hacked computers too, including using ransomware attacks. 

Why can't they be caught and punished?
Spammers distance themselves from law enforcement by operating overseas and by using botnets of infected computers for spam distribution. There are millions of computers worldwide controlled by botnets. Those computers belong to people unaware their computers have been compromised. 

Is yours one of them? I suggest that you thoroughly scan your computer after reading this article with at least two scanners, such as Kaspersky or Malwarebytes. 

What can you do?
How can you protect yourself from this onslaught of spam? One way is to limit your exposure online. Be careful which websites you give your email to.  And consider creating an anonymous-looking email address (nothing to identify you) that you can use for email not relating to work, family and close friends, or trusted financial institutions or ecommerce sites. For example, if you'd like to subscribe to news services, games sites, or social or political causes, use the anonymous email. 

It's also best to use a spam filter in your email program, and set it to aggressive. Just make a habit of checking it so you don't miss any important messages. As for any undesirables that slip through the filter, just mark them as spam and they should not reappear. 

Open a new email account
If you just can't seem to screen out the volume of spam you get, it's best to open a new email account, and only give it to those contacts in the spam-barraged account you care to maintain contact with. Then just check the old account once a week to see if you're missing anything. But never respond to emails from it. 

It takes some effort, but you can fight back against the spam industry.  

Thanks for reading.

Sam

---

If you haven't already, you can subscribe to our email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email list" in the request form, then click Send. 

Ransomware Attacks Are On The Rise

Ransomware attacks are on the rise

One of the latest ploys cybercrooks are using is to lock up your computer, or the files on it, and demand payment to re-enable access.

Via links in emails or website scams, the crooks trick computer users to install software that encrypts all or parts of a computer's files. The only way to decrypt is to pay a ransom demanded by the perpetrators.  

This is happening not only on home computers but also on government and business systems. Recently Hollywood Presbyterian Medical Center was subjected to this scheme. The hospital said it paid a $17,000 ransom in bitcoin to the hacker who seized control of the hospital's computer systems. Apparently it was worth it to regain access to the data asap instead of struggling to restore it.

The most important defensive tactic against ransomware attacks is to be very, very careful which emails you open, links you click, sites you visit. Even so, we are not perfect.  

So the next best thing is to use an online data backup service, like Mozy.com. Online backup enables you to restore files if you are hacked by ransomware. Worst case, after an attack, you can have a computer tech erase your computer’s hard drive and reload software, then restore the backed up files. Or you can buy a new computer.

Either approach can be cheaper than the ransom requested. And you avoid dealing with the ransomware jerks at all, effectively not supporting their vile business model. That’s cold comfort, but any comfort counts when we’re victimized by criminals.

If you'd like to read more about this, here's a story in the LA Times:

http://www.latimes.com/local/crime/la-me-malware-ransom-20160220-story.html

And here's another story about two more hospital ransomware victims, these in Germany:

http://www.scmagazine.com/ransomware-holds-data-hostage-in-two-german-hospitals/article/479835/

If you like to beta test software, click here to install an anti-ransomware software program I'm trying out. It's made by Malwarebytes, whose anti-malware program, Malwarebytes Anti-Malware, I recommend.

A REMINDER...

If you ever suspect your computer is infected by ANY malicious software, unplug if from the Internet immediately and request trusted tech support. The longer the exploit goes on, the more damage the hackers can cause.

Please feel free to forward this tip to friends, family, colleagues, and others.  

If you haven't already, you can subscribe to our email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email list" in the request form, then click Send.

Thanks for reading, 

Sam

Watch Out for Ransomware Attacks - They're Nasty!

I'll start out bluntly with a reminder: Please don’t click on any emails or attachments you don't recognize, and avoid suspicious websites altogether.

This is an especially important practice because there is a type of widespread cyber attack using ransomware schemes to bilk uses out of money once their computers are hijacked and locked by the hacker. 

The problem begins when the victim clicks on an infected advertisement, email, or attachment, or visits an infected website. Once the victim’s device is infected with the ransomware, the victim’s files become encrypted. In most cases, once the victim pays a ransom fee, he or she regains access to the files that were encrypted. 

The financial impact to victims goes beyond the ransom fee itself, which is typically between $200 and $10,000. Many victims incur additional costs associated with network mitigation, network countermeasures, loss of productivity, legal fees, IT services, and/or the purchase of credit monitoring services for employees or customers. 

Again, be very, very careful these days especially about emails, websites, or phone calls offering computer tech support, no matter how official the offer sounds. 

You can read the full article, which I summarized above, here: 

http://www.ic3.gov/media/2015/150623.aspx

If you suspect your computer is infected by ANY malicious sfotware, unplug if from the Internet immediately and request trusted LOCAL tech support.

Thanks for reading. Your feedback is appreciated!

Aloha, Sam

You can subscribe to email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email list" in the request form, then click Send.