Category: Lastpass

Protecting your personal information!

Paul


Booted from AmigaOS 4.1 Update 1 Live CD. Image via Wikipedia

People will steal your information in a heartbeat!

If you have had your head in the ground lately, you would let people see your information without you even knowing it.  If your one of those people who use your Ipad, kindle Fire (Affiliate link), or some really good Android device to check your emails or browsing the web, then your information is vulnerable to people reading or getting your information.

There are several ways to get your information, I’ve already talk about one way that someone hacked an account on one of my favorite science fiction site.   I actually had to help solve the problem and get the site running without redirecting visitors to another site.   This isn’t always about scaring people but to help them do what is needed.

Security starts with simple stuff!

To protect your personal information is a simple as one, two, and three.   Nothing in this article is going to be very hard but I intent to help you make it even easier to for those who are untrained.   Having to help a couple of my customers with this, I’ve pretty much come up with a way to safely browse the web without leaving footprints for those really hard to find viruses.

Portable Apps — This is a great little tool that you can customize and install Lastpass.   I thoroughly recommended it in the past and still do, it is a great deterrent for key loggers and phishing attacks.  Lastpass even has a portable(Mobile) application so you don’t have to install anything on the computer in questions.

Create a Live CD — Making a Pen Drive can go a long way to prevent from getting a virus or even someone getting your personal information, but that won’t help if your using a wireless hotspot.

Install Ubuntu — This the easiest way to have a Linux system on your computer.   Now I am not going to say Linux is worry free from viruses, but that does make it less likely to get them.   I really think Linux is OS is something that will stand the test of time because of it being an Open Source and not a closed projects like Apple and Windows.

Create a Virtual Machine —  this is like creating a live CD but not having to reboot.   You can create a virtual machine and run the live cd in the virtual machine.  This is however not as secure as rebooting because some program could be watching the network and logging everything.   I don’t recommend this as much but it is something useful if you are worried about getting a virus.

Don’t forget to use a VPN(Virtual Private Network)!

Now I already talked about some VPN’s for Ubuntu/Kubuntu but that doesn’t work with Windows or Macintosh, but I will talk about some alternatives for those who want to use Windows or Macintosh!

PublicVPN — This works with Macintosh and Windows but have not tried this so I am only showing alternatives and thus you will need to determine if this is right for your situation.

Hotspot Shield — This is one of the ones that I have used in the past and still recommend it and it now seems to work with Ipads and Apple products.

Android VPN — The Android Market Place has some great choices for several different VPN’s that may work well with your situation but I have yet to test them out and see which one is the best but yet this is something that may require some testing on your Android Device.

 Do you use a VPN?

This is something that I thought I would ask and thought I would ask it as a poll.   I would love to hear if you use a VPN and how much.   I encourage everyone to use a VPN when ever you are at a open wireless hotspot.

 

Paul Sylvester

Need Glasses? Try GlassesUSA!

Related articles

Three ways on how to NOT waste your Money!

Paul2 Replies

Another Job email!

I know it can be hard to find a job but this email from crmglobalresources.com was one of those that I thought I would talk about even more.

Here is what she said in the email:

Are you still available and looking for a new position? We were forwarded your resume and based upon your background and geographic location it may be a good match. Our Human Resources Department is currently scheduling company overviews this week for several of positions that we have open. I would like you to consider what we have to offer as a company.

We’ve recently launched a new Consulting Division and need individuals for Human Resources, Marketing, Recruitment, and Business Development. Experience is not required, although having a background in any of the above mentioned is helpful.

they also tried to have me join this web conference of there’s.   I didn’t want to  say this is a scam but every time I get these types of emails something just sounds the sirens.   I thought it would be nice for a change to tell you how to find out if a website is trust worthy or not.

Checking out the Business!

Having done this several times, I have come to use Whois.net to check out the background of the domain in question.   The site in question has only been made in the last few months.   No mater where your from you will always want to check out if a site is brand new or has been in business for quite some time.

While looking at Whois, I also see something quite interesting about domain.   Having been around the block and knowing about proxy security.   You get to wonder why this business would be proxying their address and number.

Let Google be your friend!

Never have a once not used a KEYWORD to find out more about company then when I am looking to find out more information about a company.   Never be afraid to ask words such as scam, pay, and whois.  Although these are just a few good keywords there are a ton of ways to find out information that you otherwise would never of found had you only searched for a certain term.

Nothing you put in search is ever going to be 100% right but it will give your more of an idea of what people and news are saying about this.   You can find out everything you might want to know about a business or website just by adding those to your search terms.

Check the website out!

Having been making my websites in the past, I know all to well that there are going to be people who may want a site template and just use that as their website and not change anything else.   You’ll have to check out the site and make your own determination about if it looks like a template website with stock photos and words or if they actually put a lot of effort and time into the website.   The more questions you ask about the website and find out the more you can avoid being scammed.

After doing my research for the site in questions I must say that according to others, you will have to pay them money 199$.   That really isn’t a deal in my mind and I suggest people go someplace else so as to not get ripped off by this so called company.

Paul Sylvester

 

Amazon really is Confusing some times!

Paul

Your Amazon.com password has been changed!

Dear [First] [Last],

This is an important message from Amazon.com

As a precaution, we’ve reset your Amazon.com password because you may have been subject to a "phishing" scam.

Here’s how phishing works:

A scam artist sends an e-mail, which is designed to look like it came from a reputable company such as a bank, financial institution, or retailer like Amazon.com, but is in fact a forgery. These e-mails direct you to a website that looks remarkably similar to the reputable company’s website, where you are asked to provide account information such as your e-mail address and password. Since that web site is actually controlled by the phisher, they get the information you entered.

Go to amazon.com/phish to read more about ways to protect yourself from phishing.

To regain access to your Amazon customer account:

1. Go to Amazon.com and click the "Your Account" link at the top of our website.

2. Click the link that says "Forgot your password?"

3. Follow the instructions to set a new password for your account.

Please choose a new password and do not use the same password you used with us previously.

Thank you for your interest in Amazon.com

Sincerely,

Amazon.com

Please note: this e-mail was sent from an address that cannot accept incoming e-mail. To contact us about an unrelated issue, please visit the Help section of our website.

This Happened a Few Days ago, and I thought I would talk about the security implications of this email. Some users and people are thinking this is fake. Obviously, I was concerned like everyone else so I contacted Amazon to find out about this. I talked on the Phone, and talked to a Representative that didn’t really know why my password was changed. So they told me the she’d give my email address to a specialist and that was it.

Account Alert: Please Read

Greetings from Amazon.com.

Please take the time to read this message – it contains important information about your Amazon.com account.

After careful review of your account, we believe it may have been accessed and used by a third-party to attempt to make purchases without your permission. It seems that someone obtained your personal account and/or financial information elsewhere, and used it on Amazon.com to access your account. Please note that no unauthorized charges were completed as we were able to cancel the order(s).

We have taken immediate steps to secure your account. We’ve assigned a new, temporary password to prevent further access by the unauthorized third-party, and removed any credit cards or other payment methods from your account. Additionally, if any information was added to your account by someone other than you, it has been removed. Your account access has been restored and is available to use at your convenience.

You’ll need to reset your password when you return to our site. Just click “Your Account” at the top of our Home page and select “Forgot your Password?” in the Settings section.” Enter your email address as prompted, and once completed, we’ll send you an e-mail containing a personalized link. Click the link from the e-mail and follow the directions provided. Your new password will be effective immediately. Please note that you will need to re-enter your complete credit or debit card number during the checkout process.

It is important to know that Amazon.com accounts can only be accessed by those who know personal, specific information about you and your account, including your email address and Amazon.com password. As mentioned above, it appears someone obtained this personal account information elsewhere and used it on Amazon.com to access your account.

While it is not clear how this happened in your case, we do know that personal account information is often obtained by scam artists who send unsolicited email to unsuspecting users asking them to "update" their account information. The email usually contains a link to a website that is controlled by the thief asking the user to submit personal information including email address, password, credit card number, and other relevant information. Once the information is obtained, the scam artist can then gain access to numerous online accounts since many internet users frequently use the same user name, email address, password, and financial information at multiple web sites.

Please know that Amazon.com employees will *never* ask for your password, nor will we ever send an email asking you to verify personal information.

Although it appears someone did access your Amazon.com account, they would not have been able to view your full credit card numbers as they are never displayed on our site. However, it is possible your credit card numbers may have been compromised at the time your other personal information was obtained. Therefore, we suggest you carefully review recent credit card statements to check for any unusual activity or unauthorized charges.

In the future, you can protect your Amazon.com password and account by following some of these safety tips:

———————————————————————–

1. Choose a good password: Use at least 8 characters and a combination of letters and numbers. Do not use single dictionary words, your name or other personal info that can be easily obtained, or a password that contains part of your email address.

2. Password protection: Avoid using the same password at multiple sites or for your email account. Do not share your password with others.

3. Account protection: Be cautious of unsolicited emails that appear to come from reputable online shops or services that ask you to submit personal information such as your credit card number, email address, and password. Often these emails will look as though they come from the company you’re familiar with, and the email will ask you to click on a link and "sign in". You should never provide this kind of personal information in an unsolicited email.

I don’t know if this isn’t just an automated message because anyone who know me, knows I do listen to Security Now and other such security podcasts. So I know about phishing attacks and other such ways of how someone can get your password. I’ve recommended Lastpass in the past and still recommend it. I don’t get what happened but it looks like they were concerned with my account and decided it need to be restricted until I changed my password. I even like the fact that Lastpass now uses Yubikey as a second factor of authen
tication, which I am quite glad they have implemented this. Great Going Laspass guys.

Don’t Click Links in Emails!

I’ve talked about in the past but I thought it was something that we should at least remind people. If you get an email with a link to your account and you’re not expecting it then don’t click it. You can click links if your resetting your password but those are expected. I always tell people if your not expecting it, talk to the person who sent it to you because they might have a virus or some link that will compromise your account or get your passwords. Remember, surf safe and think about your security.

Security is #1

Paul Sylvester

Five Essential Packages for Ubuntu/Kubuntu!

Paul

Why do I need these packages?

There is no right or wrong answer but when I say it is needed, it is because us as a community should be ready. I know I already talked about people getting a Virus on Linux, and that some people think you can’t get a Virus. In all aspects, the Linux community is in a holding when it comes to security and viruses. I will not discuss this enough but for today we will discuss what packages you should have already installed when you first start using Linux. Even the Ubuntu developers have talked about viruses on their main website, so it isn’t something that I am not a little worried about when people start to use Linux.

The Packages I have installed!

While there is no right or wrong package for your Linux system, I thought I would at least recommend the ones that I did install not just for security but also for convenience. It will be your decision on which ones you will be install and which ones you think you’ll need. This list is for those who are serious about security and want to avoid any chances of being compromised.

  • VLC Media Player — Although this has nothing to do with security it is something that will prevent those nasty attempts, claiming your don’t have the right Codex to play this streaming Video. At least, if you have this installed you are one step closer to and knowing that this is a fake because I have found to be very affective having all the codex I will ever need.
  • AVG Antivirus — I have personally installed means I am a little more safer but not out of the woods just yet. Although, I am much safer having installed there is a long way to go before there is a good enough Antivirus program for linux and that I hope that changes in the future.
  • Firewall — Although this is your choice, I picked arno-iptables-firewall, which seems to be what I need right now. It however is something of a personal choice and probably even an OS choice.
  • Password Manager — Yes you heard it right, if you have a good Password manager then you are less likely to give out your password to sites that look like the real thing, which is called phishing attacks. With a good Password manager, you can go to right the right site with a click of the manager. I personally recommend Lastpass, but it is all up to your which one you want to use. I really don’t know if there are more linux based password manager but I am sure you can find them.
  • VPN — Although this isn’t really a package per say, but one that talked about in the past. How to get a VPN on Ubuntu/Kubuntu. I am sure there are others out on the internet. I just don’t want to make it to complicated for beginners, so I did make my own tutorial on getting a free VPN. You really don’t want anyone listening in while at a public hotspot do you?

Your one step closer!

As you can see these are what I call essential because of most of these will make you a little more security conscience and that in turn will make you a better Linux user. for the most part your be more ready than a lot of Linux user but that doesn’t mean your invulnerable, just more educated the rest. If you have a recommendation, I encourage you to leave a comment and let others know, but for the time being these are just what I have installed on my Kubuntu 11.04 right now and I’m really happy.

See you on the Flip Side

Paul Sylvester

Are your ready for your last post??

Paul

A Great post by Derek K. Miller!

I was reminded by a great post by Derek and it was yes sadly his truelly last post.    If you didn’t know Derek and kept reading blog you’d have heard nuances of his problems.   You also have grown to know about his family through his blog post and yet you’d only touched the surface of this man by reading his blog posts.   I didn’t know him personally but that last blog post made me want to know him.   It was inspiring and well written and made everyone cherish the person he once was.   I come to think each blog should have something like this to let our readers know that there will be no more blog posts from us.   This is one reason I thought about making an educational post about getting ready to die posts?

How to Get ready for Death!

We’ve all wondered how we’d have our last blog post published and who’d do it.   That part is yours to decide but I am going to talk about the fundelmentals and let you decide just how you’d it.   I personally feel there are three ways to it:

  • Family — This is the most trustworthy choice because the family members will almost always want your wishes carried out.

  • A Will — This is common in the United States and I am sure in other parts of the world but it is one way to let someone know you have a final post and to publish it.

  • A Lawyer — This is another common way to make sure your post is published by giving access to your blog through a lawyer.

As you can see these are my ideas of how to publish that last post.   All though these are just a few, I thought the list might give you an idea to publish in your own way.    I won’t say these are the only ways but these are my ways and I don’t see any other ways to do it.

How will they log in?

This problem is common for blog owners because they want to protect there blog from being used for wrong doing.   So you’d probably be one of those who has an really good password that no one has access to it.   I currently use Lastpass and would tell people even with the last problem they had, it is still the best password manager you could have.   One way to give people the access to your blog and all that information that they will need after you die is to give your families or lawyer  several one time passwords for your Lastpass password database.   Now I say that because some of us bloggers have affiliate sales and there may be a need to switch the commission to someone’s elses name for them to use the money to keep the blog going.   It just depends on what you want the money to be used for.   A way you can think of it is, it will help pay for your funeral expenses and pay the persons back in the long run.    You’ll just want to make sure they know that the domain and hosting should be paid first to keep the money coming in but is little from the money you’ll be receiving each month.

Give Admins rights to someone you trust!

This is something that people will have to decide if it is right for you.   You can give someone who you trust their own account on your blog.   Although this is something that you have discuss well in advance.  I don’t recommend this tactic because of the possibility that someone could brute force that account and no one would be the wiser.   It however is important to come up with your own way to have that last post publish that your readers can know that their won’t be any more post by you and that they can morn for your death because you were part of their lives and you could very well be missed.

Paul Sylvester

 

 

Related articles