Irunabiz: Technology » Security

You are a sitting duck when it comes to security

Jeff Spiller — Sun, 11 Oct 2009 14:54:52 +0000

If you have a small or home business and you’re active on social networks like Facebook, Twitter, and MySpace you are a sitting duck when it comes to password security.

Why, because you’ve probably put the answer to your password reset verification questions in your social network profiles. Usually the password reset verification questions are thinks like the town you were born in, your favorite pet, where you were married, etc. Frequently this information is in a profile, or other post you’ve created. You mother’s maiden name, your wedding date, and your kids names may be on that family tree site you site or application you use. The list goes on…

So what should you do?

1. Think about those verification questions
2 Sanitize your social networking profiles and remove or obscure that information, so it can’t be used against you
3. Or better yet, change your verification questions, to information you have never published, since once information is on the Internet old copies are stored all over the place.

Remember most of the information put put on social networking sites are searchable somehow, so don’t risk your security–think about what you put out there and how it can be used.
I know of a documented and publicized case where a hacker used social networking to get answers to verification questions as part of network break-in.

Security Nag

Jeff Spiller — Sun, 08 Feb 2009 21:31:19 +0000

In the last couple of weeks, a nasty virus has been going around, so I’ll take this opportunity to remind you that you need to secure you computers.

1. Use a firewall (built in to windows) make sure its turned on.

2. Install antivirus/antispyware software, use it, and and keep it updated..

3. Keep your system updated. (Turn on automatic updates)

4. Secure your wireless network.

Resources

Microsoft Security Information

Secure your Wireless Network Please!

Secure your #$%** Wireless Network, Please !!!

Jeff Spiller — Fri, 10 Oct 2008 20:04:23 +0000

I Know I already have done a post on wireless security but I’m doing another one because of my iPhone. One of the nice features of the iPhone is that you your can connect to a wireless network to surf the web, and you can set it to ask you to join wireless networks when it finds one and guess what? you cannot believe how many open (unsecured) wireless networks I can see (without even logging into them). Frequently, when I tell the network owner about this a get one of the following answers.

“No one can get close enough to connect”

“There’s nothing on my network worth accessing”

“It’s too much trouble”

Let me deal with these excuses:

1. No one can get close enough. Yes its true.. for reasons nobody understands, in your house you have to be right next to the wireless access point to get a strong signal, but the specified maximum distance for wi-fi is just over 100ft, and I guarantee that somewhere (that you are not) its getting that range. That may be your neighbors house or someone’s car (with a laptop) across the street. Besides, if the hacker is at all serious about getting “free wi-fi” he probably has an antenna that significantly extends his range. So unless you live in the middle of 50 acres of land surrounded by barbed wire, and patrolled by dogs, someone can get your wi-fi signal.

2. There’s nothing on my network worth accessing. Let me list the stuff on your network worth accessing.

A. Bandwidth – Someone else can download files, movies, etc and slow down your network

B. Your Networks Identity. If I want to access illegal sites or download illegal files (Pirated Software, Music, etc) I can use your network, and then the download will be traced to you not me. When the RIAA or FBI, or whomever, shows up at your door, you are going to have some explaining to do.

C. Your Network Communications. Even if you don’t have any computers on your network but just hook up with a laptop, the somewhat savvy hacker can capture all of your you send over the network (like logins and passwords to your banking site).

D. Anything on any computer on your network. Once a hacker has access wi-fi connection, they can at their leisure find any weakness, or un-patched security holes in your network, and steal everything other piece of information of of value on your network.

3. Its too much trouble. See #2 above

So please read this post (or someone else’s if its better) and get your network secured, while wireless security isn’t the greatest, and it cannot guarantee that you won’t get hacked, It will make it easier for the hacker to hack your neighbors unsecured network instead of yours.

Please Note: It is illegal to connect to someone else’s’ network without their permission. I only connect to wireless networks with permission.

Secure your Wireless Network

Jeff Spiller — Mon, 19 May 2008 23:16:51 +0000

From my house I can access four unsecured wireless (Wi-Fi) networks. If I wanted to, in addition to surfing the Internet on their dime, I could access all of the files on their network and steal any confidential information that they had. (which is a federal crime). If you have a wireless network you need to follow some simple steps to secure it:

1. Get out the directions for your wireless router set the security to WEP128, or WPA (only if all you have is windows computers and not other devices like a Wii, or a Wi-fi ) . You’ll need a 16 digit password. Make sure you write it down you will need it later.

2. If your router has a default password, change it.

3 . Go to each of your computers and setup your secure wireless network with the password.

Setup a Windows XP Secure Wireless Connection http://www.microsoft.com/windowsxp/using/networking/setup/wireless.mspx#4
Setup a Windows Vista Secure Wireless Connection
http://www.ehow.com/how_2172150_wireless-connection-laptop-windows-vista.html