Sponsors

Hotmail | It's About Time | Computer Security

No more ‘123456′ passwords for Hotmail users!

Hotmail upgrades security requirements.

And it is about time. Users obviously will not make these changes so it is going to be up to the information system providers to enforce these measures to secure their services.

I think the next step will be setting time limits on the passwords and forcing users to change them several times a year.

Let me know what you think?

“Scratch “123456″ and “password” as your Hotmail password choices. They’re not going to work anymore, says Microsoft, which says it is going to forbid users of the email program from choosing such passwords in an attempt to bolster security.”

More from the article on msnbc.com.

Read an article by MLD Services on computer security.

Trojan Spyware Steals MTAN from Bank

Free software in Android Markets and Malware.

Why we need to be careful of we download from software marketplaces.

We all install those fun and free Android applications on occasion without thinking about what we might be opening. And besides Android devices, this Trojan spyware also affects Nokia’s Symbian, Blackberry, And Windows Phone.

Zitmo, a Trojan spyware app that poses as banking activation software, has now been modified to attack Android-based devices. The virus, which steals financial transaction information, has previously been successfully used on Symbian, BlackBerry and Windows Mobile devices.

read more:

Looks Like Apple is Getting a Crash Course in Security Updates

Seems like Apple has been having to sharpen it’s coding skills and getting patches out the door, and it is good to see they are doing the job.

Apple on Friday released a software update to patch a vulnerability that hackers could use to break into the company’s popular iPad, iPhone and iPod Touch gadgets….

read more:

Think about securing your network and apple laptops with a cloud based DNS filter.

And The Hacks Keep Coming

It looks like the exploits by hacking group Anonymous continue.

From Yahoo NEWS:

Hacker group Anonymous released a trove of military email addresses and passwords it claimed to have plundered from the network of US defense consulting firm Booz Allen Hamilton.

Anonymous made available a file containing more than 90,000 email addresses and other information it said in online messages that it stole from an unprotected server at Booz Allen.

read the rest here.

Are the Hackers Winning?

An interesting security report, PandaLabs reveals that the past quarter has been one of the worst in history.

“PandaLabs, Panda Security’s anti-malware laboratory, today published its Quarterly Report for Q2, analyzing the IT security events and incidents from April through June 2011. As the report outlines, this quarter has been one of the worst on record, with hacking groups Anonymous and LulzSec causing widespread mayhem and organizations such as RSA Security, the U.S. Defense Department, the International Monetary Fund, the European Space Agency, Sony, Citigroup and SEGA all falling victims to attacks.”

While the media reports on Anonymous and LulzSec, malware writers have been creating new malware at a record pace.

Read more of PandaLabs Q2 security report here.

Computer Security: Keeping Kids Safe Online

Be involved:

This is the most important item in this list. Be involved and consider activities that you can work on together. Play games, do research for school projects or on a subject of interest just for fun. This will allow you to supervise your child’s online activities while teaching her good computer habits.

Keep your computer in an open area:

If your computer is in a high-traffic area, you will be able to easily monitor the computer activity.

Set rules and warn about dangers:

Make sure your child knows the boundaries of what she is allowed to do on the computer.

You should also talk to children about the dangers of the internet so that they recognize suspicious behavior or activity. Discuss the risks of sharing certain types of information and the benefits to only communicating and sharing information with people they know.

Monitor computer activity:

Be aware of what your child is doing on the computer, including which websites she is visiting. If she is using email, instant messaging, or chat rooms, try to get a sense of who she is corresponding with and whether she actually knows them. Keep communications between you and your child open and let information flow both ways.

Consider separate user accounts:

Most operating systems give you the option of creating a different user account for each user. If you’re worried that your child may accidentally access, modify, and/or delete your files, you can give her a separate account and decrease the amount of access and number of privileges she has. See setting up parental controls in Windows.

If you don’t have separate accounts, you need to be especially careful about your security settings. In addition to limiting functionality within your browser, avoid letting your browser remember passwords and other personal information. Also, it is always important to keep your virus definitions up to date.

Consider implementing parental controls:

We already have two well written posts explaining how to setup parental controls in Internet Explorer and another how to on setting up parental controls in Windows.

There are other resources you can use to control and/or monitor your child’s online activity. OpenDNS offers has a free offering for family use, or you could consider one of the pay options that has even more features. See our article on configuring OpenDNS’s parental control features.

There are many web sites that are dedicated to this topic and we have linked to two that we think are excellent resources.

Kids Get Net Wise.

Stay safe online.

If you have any questions, concerns, or want to add to the conversation drop us a line, or post a comment.

I.T. Security

I was on twitter and saw a link to an article that discusses why the bad guys seem to be winning the IT or cyber security battle.

This article is well written and offers readers many items to ponder and provides links to a lot of great tools.

A couple of highlights from the article:

Internet User Guide: There is no User Guide to the Internet that lays out briefly and in simple language the obvious mistakes that should be avoided. Neither hardware manufacturers, nor ISPs, nor operating system vendors have bothered to offer a helping hand to their most clueless users. A pamphlet would be plenty.

Home Wi-Fi: People use WEP on their home Wi-Fi networks. That Verizon continues to employ WEP for new customers is shocking. It should be illegal. WEP encryption is easily broken, unlike the two newer schemes WPA and WPA2. That said, even WPA and WPA2 can be hacked if the password is weak.

Public Wi-Fi: People use unencrypted public Wi-Fi networks without a VPN. You don’t spit into the wind, you don’t tug on Superman’s cape and you shouldn’t use unencrypted public Wi-Fi networks without a VPN. It opens up a slew of potential problems.

And the author points out something that I thought  about while reading news accounts concerning Lockheed-Martin.

“It has been all over the news recently that Lockheed-Martin’s network was attacked and somewhat breached. What I find interesting about the story is that as a result of the attack, Lockheed-Martin "took swift and deliberate actions" to increase their network security. Really? If there was any company that should have the best possible computer security its Lockheed-Martin. Yet, even they weren’t giving security sufficient priority.”

Head over and read the rest of Michael Horowitz’s article. Why the bad guys are winning

The NSA Guide to Secure Computers and Networks

Reading through the NSA guide to securing computers and networks I noticed the recommendation to using alternate DNS providers and we agree with this assessment. Alternate DNS solutions offer a lot extra’s for a small fee.

“Domain Name Servers (DNS) provided by the ISP typically don’t provide enhanced security services such as the blocking and blacklisting of dangerous and infected websites. Consider using either open source or commercial DNS providers to enhance web browsing security.”

For mor information on alternate DNS providers or if you need help with any aspect of securing your systems give MLD Services a call. OpenDNS provides a secure alternative to your ISP’s DNS servers and offers a basic set of features for free up to a full Enterprise grade service for a small fee. MLD Services is an OpenDNS Enterprise reseller.

Read the NSA guideline on protecting home computers and networks here.

Fake Antivirus targets Apple OSX

While Windows users have been fighting this for a while, we now see that Apple’s OSX has some vulnerabilities of its own.

Starting this past weekend articles like the one referenced below are showing up all over the internet.

“A fake antivirus application is targeting Mac OS X computers using Apple’s Safari browser. Cybercriminals pushing MAC Defender, named like the legitimate MacDefender antivirus product, are manipulating keywords to push malicious sites to the top of search results.”

MLD Services has written about fake Antivirus products before and encourages our readers to keep their system secure.

  1. Keep your Operating System (O/S) updated.
  2. Keep your web browser updated and use the current version, regardless of the program or O/S used.
  3. Keep add-ons like Adobe Flash and Java updated.
  4. Keep your Antivirus (AV) and Antimalware (AM) software updated and run full scans once a week.
  5. Along with products like Microsoft Security Essentials use a second AV or AM product like Immunet or Malwarebytes.
  6. Use a firewall.
  7. Use a security service such as OpenDNS Enterprise or Home edition.
  8. Keep your system backed up.

If you have any questions please contact us via email or phone.

Small businesses need to embrace big technology

MLD Services is big on cloud based or Software as a Service (SaaS) solutions for small business and wanted to share an article I just read from others who share the same opinion.

MLD Services has already implemented online backup solutions for customers and also uses Zoho for their small business and productivity needs.

For security needs check out our cloud based security option using OpenDNS.

Claiming that developing businesses are missing a trick by assuming the cloud is not for them, Steve Ball, managing director of Cloud 9, provider of IT services to small businesses, looks at how and why modern technology should be embraced.

Click here to continue reading more about Cloud or SaaS based solutions.

Feel free to contact us if you have any questions on Cloud or SaaS tools for your business.