Mozilla issued a security update for its Firefox browser.
I recommend you install the update.
To do this, open Firefox. Then at upper right, click the three horizontal bars. At the bottom of that menu click the ? symbol (help).
In the next window click About Firefox. The browser will check if it's up to date. If not, it will download updates and prompt you to install.
Then Firefox will restart and be current (version 37.0.1). To verify, you can follow the above steps again.
You can subscribe to email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email list" in the request form, then click Send.
More Conscious Clicking
What's the issue?
Living much of our lives on computers has programmed us to be adept clickers of the mouse. But we have become so adept we're clicking reflexively when it would behoove us to be more deliberate, especially clicking weblinks.
Why should you care?
Clicking weblinks without thinking can get us into big trouble, as one little click can cause a computer infection, or worse yet, a completely hijacked machine.
How to protect yourself?
Stop.Think.Connect. This is a campaign run by the federal government to help citizens be safer online. It's managed by US-CERT, the United States Computer Emergency Readiness Team.
Here are some security tips I have culled and adapted from their website. The tips go beyond mouse clicking, which is a form of connecting, to other considerations.
- Do NOT open emails, links, or attachments from strangers. When in doubt, delete. If the message is important enough, the person will call.
- Make your passwords complex. Use a combination of numbers, symbols, and letters (uppercase and lowercase). Use at least 8 characters. Some can be word or phrase conversions to help you remember. For example, "I love Fido" (your dog, named Fido) becomes iL@v51do. Get creative, but be sure to remember your passwords. I recommend lastpass.com to help with the chore of creating and storing passwords.
- Change your passwords regularly (every 45 to 90 days). If you access a server at work, consult with your network administrator.
- Do NOT give any of your usernames, passwords, or other computer/website access codes to anyone.
- Do NOT install or connect any personal software or hardware to your organization's network without permission from your IT department. This includes USB jump drives, which can contain viruses.
- Make electronic and physical back-ups or copies of all your important work. You can scan documents. You can copy docs and keep a copy stored somewhere securely off-site.
- Report all suspicious or unusual problems with your computer to your IT department or consultant ASAP. The sooner security breaches are dealt with, the less damage will be done.
When should you do it?
Start your more careful computing habits right away. Implement one new security tip or practice each day. Forming good habits will help prevent bad things from happening to your confidential data and your computer.
Where can you find more info on this topic?
For more details, please check the CERT website.
Who can help?
If some of the recommendations are too techie for you, it may be best to hire an IT consultant to get the job done. You'll sleep better after.
In Sum
We are not completely at the mercy of computer criminals. We can up the odds of security by making many small changes in our computer use. One place to start is being more careful before clicking any weblink.
Thanks for reading. You're feedback is appreciated!
Aloha, Sam
You can subscribe to email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email list" in the request form, then click Send.
Deterring Theft of Your Home and Office Computers
What's the issue?
It seems whenever we tune into the news these days we hear of another computer system hacking. Whether it's an attack on big business, government, or celebrities, the black hat hackers are chalking up victories. But there are less techie ways of getting to our confidential data.
Why should you care?
Because it's so easy to be ripped off. A criminal could find the opportunity to pick up your computer (or phone or tablet) and walk off with it. Cyber theft can be that simple.
Speaking from my perspective on Hawaii Island it seems most homes and businesses don't have alarm systems. Most don't seem to have very good locks on their doors either. I have yet to see a laptop locked to furniture. The deterrents to computer theft around here are low.
So it would be quite easy for a thief to acquire a computer in these environments, such as after business hours, or when the homeowner is away. And once the computer is in hand, even if it's password protected, any data on that computer is compromised. (Encrypting the data does boost your security.)
Expect the worst! Reasons for stealing a computer range from a disgruntled employee, a mad ex-spouse or partner, a desperate drug addict, etc.
How to protect yourself?
If you have confidential info on your computer, and you could imagine a scenario where someone would steal the system, please think of ways to counter that.
Installing good door and window locks is a start. For a business, an alarm system is a good investment. If you are leaving for the weekend or going on vacation, you can hide your computer. There are cord locks you can install, which latch the computer to furniture (it's a deterrent). You can lock a server in a closet or cage. There are many approaches to boost security.
Put on the hat of a thief and survey your home or office for ways a computer could be stolen. Think how it would affect you if the computer were stolen. Then take appropriate action to protect that asset.
When should you do it?
ASAP! The word is out on the "cyberstreet" that stolen data is a commodity. Don't wait until after you're a victim.
Where can you find more info on this topic?
Here's a website that offers theft prevention tips.
Who can help?
Ask a friend or family member or IT consultant to help assess your computer theft vulnerabilities. Two heads are better than one to craft defenses.
In Sum
The nexus between the online and offline worlds provides many angles for the criminals. Let's keep our guard up so we don't become another statistic of cyber crime.
Thanks for reading. You're feedback is appreciated!
Aloha, Sam
You can subscribe to email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email list" in the request form, then click Send.
Be Careful When Seeking Tech Support Online
What's the issue?
There are many scams these days in the online world.
Here's one that can happen when you - the computer user - is most vulnerable: When you've got a frustrating computer problem and need help right away. Translation: When you're stressed!
Say for example you are having trouble with your HP printer and want to look for help online by doing a web search for HP printer support. Most commonly at the top of the page of your search results you'll see sponsored links (ads) for companies offering help for your problem. However, be careful when proceeding.
Why the concern?
These printer support companies may or may not have your best interests in mind. Don't be fooled by their look-alike logos or claims to be certified or expert in a certain brand of hardware or software. Many of them are overseas (outside U.S. legal jurisdiction) and are trying to lure you to call them, so they can remote into your computer and sell you services to fix various issues they claim are wrong with your computer (in addition to what you called about).
How to protect yourself against such scams?
Always look at the web address (URL) of any link before you click it. It if doesn't belong to the vendor of the product you are researching, such as hp.com, be wary about any offer of support.
And be very, very particular about who you let access your computer remotely.
Once connected to your computer they can install software to snoop on your system, cause infection, and gain remote access in the future without your permission. Plus, if you give them your credit card for payment without some due diligence, you could be in further jeopardy of identity theft.
I'm not saying there are no legitimate remote support services or phone tech support to be found online. Just be very cautious.
When should you be alarmed?
If you take the gamble and hire someone online, and they do solve your problem, just say no the minute they try to sell you extra services. Only pay for what they quoted for the specific issue you contacted them about. Ask them to email you an invoice, so you can see the service and charges before you provide credit card info, and only give the minimal payment info - don't provide your billing address, your phone number, etc.
Where can you find more info on this topic?
Here is a site with some pointers for avoiding online fraud.
Who can help?
Here are my rules of thumb for seeking tech support:
First, contact the hardware or software manufacturer, especially if under warranty. Even if you have to pay for the call (for out of warranty items), they are more likely to help because they usually know their product best, including all the failings.
Second, call the retailer who sold you the product if you can't get adequate tech support from the manufacturer. Ask if the product can be replaced. Even if you have to pay for shipping, it might be cheaper than buying a new one. (And, remember, they want to keep you as a customer.)
Third, ask a friend or relative for a referral to a local IT professional. Hiring someone local and referred gives you a level of comfort with the provider, and supports the local economy. Get a quote, because the cost of a service call may lead to your biting the bullet and replacing the product instead of attempting a fix.
In Sum
In general we tend to have faith in people and would prefer a win-win business exchange. The Internet is a wonderful resource. But the opportunity to take advantage of people online is too tempting. The Internet facilitates quick and somewhat anonymous commerce, so it's easy to set up scams.
As consumers on the Internet we need to double and triple our guard. Hope for the best, expect the worse!
Thanks for reading. You're feedback is appreciated!
Aloha, Sam
You can subscribe to email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email" in the request form.
Be Careful When Using Wi-Fi
What's the issue?
Whether you are connecting to Wi-Fi (wireless networking) with your laptop, tablet, or smartphone... whether at home, at work, or in public... be aware that your privacy and security are vulnerable to hackers.
To clarify, Wi-Fi is not used when connecting to your cell provider's data network. It is accessed most commonly from a wireless router at home, work, or in a public setting.
Why care?
Wi-Fi is not a secure transmission medium, even when encrypted. This means information you exchange across the wireless network is not secure--your confidential information. This includes casual websurfing, email use, and e-commerce.
To illustrate, when connecting to Wi-Fi at Starbucks (via the Google network there), you are presented with this snippet from their terms of use: "You understand that This Wi-Fi... is not inherently secure and that wireless communications may not remain private or free of interception or access by others. We will not be liable to you or any other party for any lack of security that may result from your use of This Wi-Fi..."
Google is making it crystal clear that Wi-Fi is not inherently secure and that you are responsible for your own security. This applies anywhere you are using Wi-Fi, especially outside of your home or business network, which hopefully you have already secured--that is, reduced, not eliminated, the risk of hacking by using the best encryption available.
How to best protect yourself when using Wi-Fi?
Without getting too technical, a best practice is to only use Wi-Fi when connected via a VPN (Virtual Private Network). One program providing this type of protection is Hotspot Shield by AnchorFree. They offer free and paid versions.
After you install their program, whenever you connect to Wi-Fi, you can run the shield to access the Internet via a secure, encrypted tunnel (VPN).
You can obtain the Hotspot Shield software here.
When should you do it?
Any time you connect to Wi-Fi do so via VPN. If you can't, be very careful about what you do online. For example, avoid banking, shopping, and any sites that require password login.
Where can you learn more on this topic?
You now know what to do as a user of Wi-Fi. In addition, here are some best practices for setting up Wi-Fi at your home or office.
Who can help?
If this all seems too technical but you are concerned and want to be better protected, you may want to hire an IT consultant. This is an especially good investment if you are responsible for data security in an office environment.
In Sum
Wi-Fi is wonderful technology. It gives us access to online resources in diverse locations worldwide. However, we must reduce the security risks when using it so we don't get taken advantage of, which is increasingly common.
Thanks for reading. You're feedback is appreciated!
Aloha, Sam
You can subscribe to email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email" in the request form.
Safeguarding Your Smartphone
What's the issue?
In a previous post I recommended taking stock of your wallet items that could be exploited for identify theft and other illegal purposes. Now that you've done that chore, let's move onto another commonly carried digital data asset that's targeted by criminals: your smartphone.
Why care?
Your smartphone--be it an iPhone, Samsung Galaxy, Blackberry, etc.--likely contains or can give access to bank accounts, social security numbers, birth dates, passwords, etc., not to mention emails and private photos. Do you want any of that in the hands of someone you don't trust?
How to protect yourself?
Though this sounds like a major chore (and can be!), but I suggest making an inventory of confidential data on your phone so you know exactly what you stand to lose. The only personal data somewhat safe to keep on your phone in the Contacts program, for example, is names, addresses, and emails. Don't store birth dates and other confidential info.
For storing confidential data like birth dates, account numbers, passwords, etc., I recommend a program such as LastPass, which you can sync between your phone and their secure website (https://lastpass.com/f?7616566 ). This means in addition using the LastPass app on your phone you can log in from any computer to the website to also access your private info. You can learn more about LastPass on their site.
And though convenient, it's really best not to do any banking on your smartphone. Here's one of many articles explaining the dangers of smartphone banking.
Also be aware that cybercrooks can crack your smartphone's login password, so don't trust that alone to block access. It's best to set up encryption so if someone does steal the phone, it will be more difficult to access the data. Check the website for your phone's vendor for how to encrypt it.
Another option to set up on your phone is remote wiping. You can use this feature in the event you suspect the phone has been stolen. Check with your smartphone vendor's website for instructions to set this up. Be aware after wiping the phone you'll lose any data that's not backed up.
When should you do it?
Take inventory of the confidential data on your phone as soon as possible. Block out one hour to sit with your phone some place without distractions. Get a pad of paper and jot down your concerns about what's on your phone, then try on your own to whittle down your exposure and beef up security per the suggestions above.
Where can you learn more on this topic?
This website provides a list of best practices for more secure use of your smartphone.
Who can help?
You can take your phone to the store where you bought it for tutoring and advice on this topic. You can also call your service provider, such as AT&T. Most service providers are keenly aware of cyber theft exploits and can provide the latest tips for protection.
In Sum
If all this makes you dizzy, it should. It's a bummer we can't be more casual with our digital devices and enjoy them without worry. But that's not the world we live in. However we can be informed and take steps to to reduce security risks, just as we do with our cars, homes, and other possessions.
Thanks for reading. You're feedback is appreciated!
Aloha, Sam
P.S. You can subscribe to email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email" in the request form.
Steps to Take if Your Identity or Credit Cards are Stolen
Here's a follow up to my post about recording the confidential items in your wallet so you know what you lost in the event of theft.
Below is a very useful reference posted on the Hawaii Better Business Bureau website:
If your ID or credit cards are lost or stolen, immediately notify your credit providers by phone and then notify each of the three credit bureaus to request a “Fraud Alert” be placed on your file.
Placing this alert tells creditors to follow certain procedures before they open new accounts in your name or make changes to your existing accounts. Posting a Fraud Alert will also make it difficult for you to open instant credit, so be sure to read all information before engaging a Fraud Alert.
Posting a Fraud Alert also entitles you to free copies of your credit report. When reviewing your credit report, look for inquiries from companies you have not contacted, accounts you did not open, and debts on your accounts that you can’t explain.
Close any accounts that have been tampered with or established fraudulently.
Big 3 Credit Bureau contact numbers
www.equifax.com 800-525-6285
www.experian.com 888-EXPERIAN (397-3742)
www.transunion.com 800-680-7289
