Friday, May 15, 2015

Be Careful Which Data You Store on the Internet

Be Careful Which Data You Store on the Internet

What's the issue?
Photos, videos, emails, documents, spreadsheets, etc. - all the stuff you create on your digital devices and post or store on the Internet - are accessible to other people, and not just people you've shared them with. 

The internet is a public network and as such is a tempting target for hackers. Whether it's called the Web, the Net, or the Cloud, all services are running on a public platform.  

Cloud storage companies that host your email, your personal or company files, your precious pictures of family, etc. are usually doing their best to limit access to authorized users only, i.e. those users having passwords or other means of authentication. 

But the potential to score some valuable confidential data is very tempting. So cyberthieves are thriving by exploiting weak points in software all across the internet. 

Why is software so vulnerable?
Software - whether a web browser, PDF reader, email program, cloud application, etc. - is inherently insecure the moment it's released, whether it's a free or paid version. 

Computer code is too complicated to be perfectly debugged. That's why all software companies and programmers issue fixes, patches, updates, etc. for their programs. There's no way around it. 

Given this fact, and the growing opportunity and enthusiasm for cybercrime, we users must be suspicious from the outset whenever we do anything online, especially posting, storing, and sharing our data.  

How to improve protection of your data?
First decide what's confidential. Usually this includes anything you don't want others to see besides yourself or trusted people. Confidential data can range from the obvious - a bank account number - to the seemingly innocuous, such as a carefree photo taken of you at the beach. Data is like a gun; its potential for good or ill depends on the intent of the person wielding it.

If you are running a business and need to store confidential data online for staff access make sure there is strong encryption during the transmission and storage of the data. (I will write more about encryption in a subsequent article.)

When should you take action?
As soon as possible, take stock of the data you store online. 

After you determine which files you consider confidential, decide your risk tolerance for storing those files online. Translation: If the site storing the files got hacked, how vulnerable would you feel? 

And this begs the question: Why are you storing any confidential data online? (There are secure ways of storing passwords, data, account info, etc. using websites like lastpass.com)

Where can you find more info on this topic?
Here's an article posted on a Boston University page outlining the concerns of storing data in the cloud and which addresses the importance of encryption. 

Who can help?
If this all seems too technical but you are concerned and want to be better protected, you may want to hire an IT consultant. This is an especially good investment if you are responsible for data security in an office environment. 

In Sum
We don't leave our car doors unlocked or windows rolled down in public parking lots. We don't leave our home doors and windows unsecured when we're on vacation. We have some common sense in these areas. In this new digital age, we need to develop common sense concerning our private data. Not doing so can be very damaging to our finances, our identity, and our reputation. 

Thanks for reading.
-Sam

Thursday, May 14, 2015

Adobe Acrobat Reader Security Update - 11.0.10

Adobe has released a new security update for Acrobat Reader, now version 11.0.10


I recommend that you install it. 

Before doing so, close all open programs and save your work, as you may be prompted to restart the computer when the update installation is completed. 

You can check if your version of Adobe Reader is current by opening the program. 

Then click the Help menu at upper right. 

Then click Check for Updates. 

Adobe will check for updates, and download if needed. Note: You'll see the Updater at lower right of your screen. 

Once the Updater has downloaded the updates, click the Updater icon to install, then follow the prompts. 

You may be prompted to click Restart Now to complete the procedure. This will restart your computer. 

---

You can subscribe to email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email list" in the request form, then click Send. 

Adobe Flash Player Security Update - 17.0.0.188

Adobe has released a new security update for Flash Player, version 17.0.0.188.


I recommend you install it. 

You can check if your Flash is current on the site listed just below. (Do so in each of your browsers, i.e., Firefox, Internet Explorer, etc. Note: if you update Google Chrome, it includes the latest Flash version.)

Check your Flash version:

If you need to update, here's a link to Flash on Adobe's site:

Again, be sure to install Flash per the version needed for each of your browsers.  
And very important, now and forever: Don't download Adobe Flash Player from any other site except the adobe domain (adobe.com)

Last, when updating Adobe products don't install any optional offers, such as McAfee. Just uncheck the box and proceed to download and install Flash, or Reader, etc. 

---

You can subscribe to email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email list" in the request form, then click Send. 

Mozilla Firefox Browser Security Update - 38.0.1

Mozilla has issued another security update for its Firefox browser. 

I recommend you install the update. 

To do this, open Firefox. Then at upper right, click the three horizontal bars. At the bottom of that menu click the ? symbol (help). 

In the next window click About Firefox. The browser will check if it's up to date. If not, it will download updates and prompt you to install. 

Then Firefox will restart and be current (version 38.0.1). To verify, you can follow the above steps again. 

---

You can subscribe to email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email list" in the request form, then click Send. 

Tuesday, April 21, 2015

Mozilla Firefox Browser Security Update - 37.0.2


Mozilla has issued another security update for its Firefox browser. 


I recommend you install the update. 

To do this, open Firefox. Then at upper right, click the three horizontal bars. At the bottom of that menu click the ? symbol (help). 

In the next window click About Firefox. The browser will check if it's up to date. If not, it will download updates and prompt you to install. 

Then Firefox will restart and be current (version 37.0.2). To verify, you can follow the above steps again. 

---

You can subscribe to email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email list" in the request form, then click Send. 

Wednesday, April 15, 2015

Adobe Flash Player Security Update - 17.0.0.169

Adobe has released a new security update for Flash Player, version 17.0.0.169.

I recommend you install it. 

You can check if your Flash is current on the site listed just below. (Do so in each of your browsers, i.e., Firefox, Internet Explorer, etc. Note: if you update Google Chrome, it includes the latest Flash version.)

Check your Flash version:

If you need to update, here's a link to Flash on Adobe's site:

Again, be sure to install Flash per the version needed for each of your browsers.  
And very important, now and forever: Don't download Adobe Flash Player from any other site except the adobe domain (adobe.com)

Last, when updating Adobe products don't install any optional offers, such as McAfee. Just uncheck the box and proceed to download and install Flash, or Reader, etc. 

---

You can subscribe to email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email list" in the request form, then click Send. 

Reduce Hacker Risk - Use Mobile Devices for Online Work, PC for Offline Work

Reduce Hacker Risk - Use Mobile Devices Online, PC Offline 

What's the issue?
Many of my clients are multi-device users. That is, they have a smartphone, a tablet, and a laptop or desktop, at least. They use them all for email, web surfing, and social networking. Often the laptop or desktop is primarily used for offline activities and larger programs such as bookkeeping, gaming, word processing, photo editing, and music library management. 

I'm beginning to recommend to my clients that they can reduce the risk of computer hacks by not using Windows-based systems for the web or email. In other words limit email, social networking, and most web surfing to phones and tablets. 

Why?
Because most hacking occurs via web browsers and emails, targeting Windows-based computers. These hacks occur when user land on certain websites, click weblinks in emails or on social networking sites, and open infected emails. If you don't do these activities on your Windows computer, you likely won't get hacked. (Macs are inherently more secure and so far not widely targeted.)

You still have to be careful about phishing exploits, which can trick you to reveal confidential information on any device. If you'd like to educate yourself on phishing, here's one site to check. 

As a bonus, you should notice improved computer performance. Why? Because having browsers open (especially more than one, with several tabs in each) can slow down the system.  

How to limit web and email use on your PC?
Start by limiting web use to recognized secure sites like your bank, amazon.com, and reading news at legitimate sites like cnn.com. While on your computer you can download updates to your photo-editing software, your bookkeeping program, etc. because the updates come directly from the software vendor. The same goes for updating banking data in your bookkeeping program, which links securely to your bank. 

Here's a recommendation for company managers: If your organization depends on staff using the web and email for work, you can at least prohibit access of non-work-related websites. Here's a template your organization can adapt concerning acceptable use of its computers.

When should you do it?
Try this approach for a few days: Don't do any email or social networking on your computer. Ask yourself how it's working for you. Perhaps you can tweak my recommendation for your purposes. 

I know what I'm proposing seems extreme, but trying it will at least bring more awareness to how you use the Internet and what risks you're taking.

Where can you find more info on this topic?
If you'd like to get more educated about the most common online threats, check out this article by Symantec.

Who can help?
You may want to hire an IT consultant--especially if you run a business--to learn how you can reduce your exposure to online hacking threats. It can be money well spent, as business data connected via your network to the Internet (most always the case) is at risk. 

In Sum
Knowledge is power. Keep educating yourself on computer security, take appropriate action, and you will reduce threats to your confidential data. 

Thanks for reading. You're feedback is appreciated!

Aloha, Sam

You can subscribe to email tips by visiting www.kokuadigital.com and entering your name, email, and "add to email list" in the request form, then click Send.