How To Avoid Keyloggers, Ransomware, And Rootkits

keyThe most advanced threats to your computer – keyloggers, ransomware, and rootkits – are also the most insidious. The best way to deal with them is to avoid them entirely.

Keyloggers come in hardware form, but are usually software viruses that secretly record everything you type. Ransomware holds your computer and its data hostage until you pay. Rootkits allow hackers to remote-control your computer, and are often used to introduce other types of malware.

Related article: Advanced Threats Target Your Computer (The Northwest Herald)

So why should you fear these threats?

  • They bypass your security.
  • They steal your money and your identity.
  • They force your computer to infect still more computers.
  • They turn your computer into a spam-generating cog in the hackers’ profit-driven machine.

In the tech industry we say you’re rooted or pwned (like owned with a p – “powned”). In other words, the hackers own you. They own your accounts, your passwords, your address, your finances… your life.

Related Tech Tips article: What To Do If You Get A Computer Virus

Fake Antivirus Software
In particular, watch out for fake software scams. I’ve spoken of these before. Fake antivirus software tricks you into installing it, then bypasses your protections and invites its malware friends in to play. It’s devilishly hard to get rid of, as anyone who’s been infected can tell you. Usually you’re looking at a reinstall. And the darn stuff actually makes you pay to be infected! Talk about a scam.

This is why you don’t want to do a web search for “Windows antivirus” and start clicking on random links – many of them are poisoned results that lead you straight to the lookalike fakes.

Related Tech Tips articles: Is Your Security Software Real Or Rogue?How To Spot Bad Web Links

Rootkits And Remote Admin
Concerning rootkits – those backdoor programs that allow hackers remote control of your computer – I’d like to point out that these are not the same as the built-in remote admin tools on your computer. A rootkit, by its nature, is designed to be stealthy. Remote admin programs are supposed to be used to maintain computers for legitimate purposes (say, if you are performing tech support on machines in a remote office). But it can also be exploited just like a rootkit if a hacker convinces you to turn it on. Check out this article on telephone tech support scams for an example.

Related articles: Tech Support Phone Scams Hit HomeHow To Kill Computer Keyloggers

Drive Imagers
Fortunately, you can make it easier to recover your computer if you do have to reinstall it – by imaging the drive while it’s still clean. This, combined with regular backups of your everyday data, will let you restore your computer quickly.

Windows Drive Imagers

Mac Drive Imagers

Have you encountered keyloggers, ransomware, or rootkits? Share in the comments, and don’t forget to subscribe to Tech Tips by email and follow on Facebook. You can also follow @trionaguidry on Twitter.

Image courtesy of Stuart Miles / FreeDigitalPhotos.net

Hands-On With The BlackBerry Z10

z10I recently spent some quality time with the new BlackBerry Z10. The Z10 is a lightweight, keyboardless smart phone… wait, a keyboardless BlackBerry? How does that work? Let’s find out.

The Z10 has a 1.5GHz dual-core Qualcomm processor with 2GB of RAM and a 4.2-inch 1,280-by-768 LCD display at 356 pixels per inch. It’s sized about the same as an iPhone, 5.1 by 2.6 by .35 inches, weighing 4.8 ounces.

Related article: Review: Will the new Z10 save BlackBerry? by Triona Guidry (The Northwest Herald)

The Unboxing

First, we have to install the battery. Fortunately the Z10′s case is a snap to open, no finger-mashing required. Once that’s done the unit launches into a setup wizard that talks you through a brief configuration process. It also gives you the basics of the Z10′s swipes and gestures.

I like to evaluate new products from the perspective of a brand-new user. How do you figure out how it works? What resources are available to help? In the case of the Z10, the learning curve is short and sweet. Swipe to the Hub for notifications, swipe to your apps to launch them. The Z10 reminds you with helpful glowing arrows if, for example, you forget you have to swipe from the bottom up to unlock your phone.

The Z10′s Software Keyboard

Instead of physical keyboard, the Z10 comes with a software keyboard which is responsive enough that you might forget it’s not physical. Predictive completion learns as you type, so your phone quickly becomes customized to your preferences. In other words, it’s still a BlackBerry even with a software keyboard. Weird but true.

BlackBerry 10

The Z10 runs BlackBerry’s signature BlackBerry 10 software, which has received rare accolades from the tech industry. It’s not hard to see why. BB10 is sleek and intuitive, giving you a no-frills environment that lets you get the job done with minimal interference. However, that easy of use comes at the cost of customization. This isn’t Android; you can’t just arrange your icons any old way you like. But die-hard BlackBerry fans will be pleased.

Features, Functions, And Apps

Unfortunately you’re not going to find as many apps for BlackBerry as for iOS and Android. BlackBerry’s app store simply hasn’t been around long enough yet, so you might find yourself waiting (and wondering) if your favorite apps will be released for it.

The Z10′s Help section rocks. It’s well-organized and helps you find everything you need to know, which is vital considering that this phone is brand new to the market. I especially liked the prominent Passwords & Security section which can help you protect your phone.

Related article: Tools To Protect Your Smart Phone From Malware

Conclusions

The Z10 is a decent entry into the smart phone arena, but BlackBerry has a steep climb ahead as it struggles to catch up to its competitors.

What do you think? Can BlackBerry woo its CrackBerry addicts back into the fold or has the company lost too much momentum? Share in the comments, and don’t forget to  subscribe to Tech Tips by email and follow on Facebook. You can also follow @trionaguidry on Twitter.

How To Prepare Your Computer For Recycling Or Donation

computer-recycleIf you have old computers and cell phones lying around, you’re not alone. Many of us hang onto old devices because we don’t know what to do with them. Sure, we want to donate or recycle, but what about the data?

Here’s how to erase your computers, cell phones, and tablets prior to donation or recycling. Don’t forget printers, copiers, and fax machines too! You can find more details on e-waste and e-cycling on the EPA’s web site.

Warning: This article presumes that you’ve either backed up or don’t need the data on the device. Make sure you have everything you need before you do this!

Computers

If you’re recycling you can simply format the drive. Try DBAN for Windows to erase your hard drive thoroughly. Mac users can use their Apple system software utilities.

If you’re donating, presumably you want to present a usable computer with an operating system on it. In that case you’ll want to do a factory reinstall from the original disks or hard drive partition. Check your manufacturer’s instructions for details on how to restore to the original factory software. This turns your computer back into what it was when you bought it, without your personal data.

When in doubt, you can always remove the hard drive and smash it to pieces.

Smart phones and tablets

First, delete all contact, calendar, and other private data. For both tablets and smart phones, perform a factory reset to zap any remaining data. If it’s a phone, remove the SIM card (check your manufacturer’s instructions).

Printers, scanners, copiers, and fax machines

Computers and phones aren’t the only devices that keep a record of your data. Fax machines and copiers do too, and even some printers and scanners (usually the big fancy ones). Check the manufacturer’s instructions on how to perform a power reset or factory reset. Afterwards go into the printer’s configuration settings and make sure no private data remains.

Where can I donate or recycle?

The EPA has a web site with information on where you can recycle or donate your used equipment. Check with your local schools, libraries, and charitable organizations. You never know if your used computer might fill a need right in your own community.

Bear in mind that these techniques may still result in recoverable data, if someone tries hard enough. It’s always best to double-check. You can also reformat multiple times to reduce this risk.

Do you have questions about how to recycle or donate your computer? Ask in the comments, and subscribe to Tech Tips by email and follow on Facebook. You can also follow @trionaguidry on Twitter.

Image courtesy of Stuart Miles / FreeDigitalPhotos.net

 

Cyber Attacks Spell Trouble For Consumers

padlock-phoneDo you know what to do if your account is swept up in a cyber attack? In the last year many popular sites, including LinkedIn, Twitter, and Evernote, have been attacked and consumer information stolen. What can you do to protect yourself?

As I said in my tech column in this month’s The Northwest Herald:

Cybercriminals attack big companies for the big prize: user account information. With email addresses and passwords in hand, they go on an account-cracking spree across the Internet, hoping that some of the users in their massive heist are using the same weak passwords on multiple sites. Itʼs likely some of your accounts have already been swept up in data breaches like this.

There are a number of things you can do to reduce the possibility of being hacked. Here are my recommendations plus related Tech Tips articles to help you with each step.

If your account has been hacked, you need to reset it. Here is information on account security and resetting hijacked accounts for some of the major sites:

And here is information on the recent breaches I mentioned:

For the latest news on data breaches (something a little more reliable than mass media articles), try these IT security sites.

Do you have questions about cyber attacks and hijacked accounts? Ask in the comments!

Image courtesy of Stuart Miles / FreeDigitalPhotos.net

Your Webcam Can Be Used Against You

webcamSmile! Your private life might be streaming live on the Internet!

Did you know hackers use viruses to commandeer the webcam on your computer, tablet, or smart phone? Makes you think about all the places you take these devices, and what they could be recording. In this month’s The Northwest Herald I talk about the dangers of unsecured webcams and microphones:

It’s not just your devices, but those of the people around you as well. Chances are, you’ve had a phone or tablet nearby during a private conversation with a lawyer, a doctor, a friend. What if someone else was watching and listening through that device?

Cameras can be hijacked in a number of ways. Cybercriminals can commandeer them with viruses, then extort you by demanding money for the deletion of potentially embarrassing photos and videos. Sometimes they have the nerve to imitate law enforcement, claiming that you have illegal content on your computer and will go to jail if you don’t pay their fee.

I’m fond of taping over the webcam unless you need to use it regularly – in which case a purse or pocket provides a lovely view of lint, should someone try to sneak a peek. That doesn’t help with microphones, of course, which is why it makes sense to store your mobile devices where they’re less likely to overhear private conversations.

I also strongly recommend to my fellow parents – get the computers and camera-equipped game consoles out of your kids’ bedrooms, NOW. There are some scary new statistics about the increase in predatory sexploitation which will make you want to take a hammer to every camera in the house.

Here are some articles about webcam security you might find interesting:

What are your concerns about webcam and microphone security? Share in the comments!

Image courtesy of renjith krishnan / FreeDigitalPhotos.net

 

How To Create Secure Passwords (Revised Edition)

Computer SecurityMany people say to me, “I don’t need a secure password. I don’t have anything sensitive on my computer, so I don’t care if a hacker gets in.” You, my friends, are a hacker’s dream. Because it’s not necessarily your personal information they want, although they’ll happily steal your credit card info if they can. No, what they really want is control of your computer, your email address, your Facebook page… anything and everything that will let them do their dirty work from behind a smokescreen.

I originally posted this on Tech Tips in 2010, based on many years of teaching tech support clients about password safety. But some of the old rules no longer apply, so this is my newly revised edition. If you think you can still get away with slapping an exclamation mark on the end of a word, you need to read this revised advice.

Strong passwords must be:

Not in use on any other system
This is perhaps the biggest no-no in the password rulebook. When hackers nab passwords, they try the same account/password combinations on popular sites like Google, Facebook, Twitter. If you’re using the same password you just let them in. Do not ever, ever, ever use the same password anywhere. Before you despair, keep reading. There are tools to make it easier.

Changed regularly
Yes, you have to change your passwords. And yes, they still have to be different everywhere. Use a secure password management tool if you find it unmanageable (see below).

12 characters or longer
Think passphrase rather than password. We used to say 6-12 characters was enough, but we’ve found that the longer and more complex a password is, the less likely it can be cracked.

A mix of upper- and lowercase letters, numbers, and symbols
Some systems won’t allow you to use a range of characters in your password, in which case I suggest you reconsider using that site. Do you really trust someone who isn’t going to allow you to secure your account properly? Makes you wonder how secure everything else on the site is.

Not common words or proper nouns found in a dictionary
An analysis of the recent LinkedIn breach found that many people were using ridiculously simple passwords like “password” and “123456.” If your passwords sound like these, change them now.

Not the names of your spouse, kids, pets, or other personally identifying information
Presidential candidate Mitt Romney’s online accounts were hacked via the very simple expedient of answering security questions with information that had been made publicly available. Same thing happened to Sarah Palin. Don’t create passwords out of information that can be gleaned about you, and don’t share information that can be used to guess security questions.

Examples of good and bad passwords

Good passwords (but don’t use these!)

AP@ssw0rdIJustMADE!UP!4U
Here’sAnOtHeR1FOR$You

Bad passwords

password
password1
password!
123456
<blank>
mypassword
spouse’s name
pet’s name

Password Don’ts…

  • Don’t rotate between the same two or three passwords. It’s just as bad as using the same password everywhere.
  • Don’t send passwords via email, Facebook, Twitter. Use other means like text message or fax, which goes directly to the recipient. Or, even better, a phone call.
  • Don’t stick passwords on Post-It notes. Whether it’s under the keyboard or on a bulletin board, it’s exposed. Be like Gandalf: Keep it secret, keep it safe.
  • Don’t share passwords and accounts. This is especially prevalent in small businesses. Don’t create one account then share the password; create multiple accounts for each person who needs access. More time consuming? Sure. More secure? You bet.

Tools to manage your secure passwords

Feeling overwhelmed? Don’t worry, there are plenty of password management tools available. With a password management tool all you have to remember is one master password and the software takes care of the rest. I recommend KeePass, 1Password or LastPass. Even better, you can use the same password management tool on your computer and on your mobile devices.

Why not take this opportunity to change your passwords? It’s the best thing you can do to protect yourself against identity theft and cybercrime.

[Originally posted in 2010 as How To Create Secure Passwords. This version has been updated with the latest advice on secure passwords.]

How To Learn Windows Phone 8

lumia-822I recently had the opportunity to test the Nokia Lumia 822 smart phone from Verizon. From my review in The Northwest Herald:

 At 5-by-2.7-by-0.44 inches, the Nokia Lumia 822 is a streamlined yet speedy device. The 4.3-inch, 800×480 WVGA AMOLED display may not be the fanciest, but it boasts sharp colors and good readability even in a brightly lit room. The Lumia 822 uses the 1.5GHz Snapdragon processor with 1GB of RAM and 16GB of storage, and it supports MicroSD cards as well as NFC.

I was particularly interested to find out how consumers are supposed to learn this brand-new version of Windows. Good news, everyone: there’s a convenient Help & Tips section in the menu, which is only a left-swipe away from the home screen. From here you’ll find simple instructions plus videos and other helpful links. Some quality time spent browsing here will save you frustration down the road. You may also find yourself making frequent use of the Back button, as the menus aren’t always intuitive.

In addition to the Help & Tips section on your phone, Microsoft has online resources to help you learn how to use Windows Phone 8. Here are a few to get you started, including Rooms and Groups which I mentioned in my review.

Whatever kind of phone you choose, let me remind you to enable your security settings. Passcode lock, remote data erasure, and Find My Phone are all included with your phone, but you need to set them. Microsoft has a nice primer on how to secure your phone: Microsoft: Tips to help keep my phone secure

Have you tried Windows Phone 8? What do you think? Share in the comments!

 

Tech Support Phone Scams Hit Home

cybercrime-laptopWhat would you do if a stranger called out of the blue and offered to fix your computer over the Internet – for a price?

I hope your scam detector’s going off because cybercriminals don’t limit themselves to online methods of duping their victims. In my tech column in this month’s The Northwest Herald I talk about tech support phone scams, in which the bad guys pretend to be Microsoft or other reputable companies. From the article:

 My neighbor was lucky. This particular scammer was clumsy on the bait and switch, but you can’t always count on that. Some scammers are so slick they’ll convince you that you’re talking to your own mother. They take advantage of those who aren’t tech savvy by using jargon and playing into our fears.

Tech support scams aren’t new. Con artists will try everything from pop-up windows to spam emails to fake search engine ads, but they also employ offline methods like phone calls, snail mail, and faxes. Everyone is a target, as this random call to my neighbor shows.

If you’re interested, here are a couple of articles from Ars Technica about tech support phone scams, which will give you a feel for how the scammers operate.

If you need tech support, go directly to the source, whether it’s Microsoft or Apple or Dell or HP or whoever. And of course you can always come over to Tech Tips if you have computer questions. Here are some other Tech Tips articles that might help if you’re in a crisis:

Have you gotten a phony tech support call? What did you do? Share in the comments and don’t forget to  subscribe to Tech Tips by email and follow on Facebook. You can also follow @trionaguidry on Twitter.

Image courtesy of chanpipat / FreeDigitalPhotos.net

 

Readers Ask: Sending DOCX Files To Macs, Troubleshooting Slow Web Sites, Choosing New Computer Hardware

computer-booksI’ve been talking with Fr. Jack Sweeley about whether he should move to Windows 7, Windows 8, or a Mac. After our initial discussion, he had some followup questions, which I am posting with his permission:

Thank you so much, Triona. This is very helpful. However, I have a few questions.

1. As I stated, I have several books written and others in process as well a hundreds of commentaries all written with Word using VISTA. Will I be able to open and edit these on a Mac?

2. From time-to-time I have sent documents I have written to someone who at that time had a Mac and they told me they could not open what I sent written in WORD on a PC. Is this still the case?

3. Contrarily, will I be able to open documents sent to me in WORD using a Windows PC on a Mac?

4. RE Macs: Could you give me comparisons between hard drive space on a Mac v. PC (is a gig a gig on both), for processing speeds what are the terms used and are they the same for a Mac and a PC, what are the terms used for memory and are they the same for a Mac and a PC?

5. What amount of HD space, processing speed, and memory do I need to do what I described in my original letter? I am impatient and go crazy having to wait for Websites to load especially when I have 8-10 sites open at the same time.

6. I know a little about the landscape of PCs and once I know what parameters I am looking for I can find one. However, I have never even looked at a Mac to say nothing about being able to compare them. So, could you cite different kinds of Macs–with their price ranges for what I need–and the pros and cons of each.

Let’s look at Fr. Jack’s needs and see how we can help him.

Opening Word For Windows .DOC and .DOCX Files On Macs

wordmacYes, you can open Word documents, both .doc and .docx, on a Mac. Apple’s word processor Pages (paid; via App Store) can open both but saves in its own proprietary .pages format. NeoOffice (donationware, www.neooffice.org) can also open both .doc and .docx but again, it saves in its own .odt format. You can spring for Microsoft Office for Mac (paid; via Microsoft), which is the most expensive option but can handle Word .doc and .docx files without conversion.

The person to whom you sent the Word file may not have had a recent Mac word processing program, or did not have Microsoft’s free .docx converter installed. You can either make sure all Word files are saved as .doc and not .docx (.docx is default from Word 2007 onwards), or make sure the recipient can convert .docx. Don’t go looking online for free converters, use the genuine ones from Microsoft to avoid viruses.

For the most part, Word, Excel, and PowerPoint files can be used interchangably between PCs and Macs. The main exception is if you have code in Visual Basic (VBA) or custom macros not supported by the Mac. Everyday documents work fine, and on the rare occasions they don’t, the one-time installation of a converter tool usually fixes the problem.

Now, if you have print-ready files, a Word document just is not a proper layout tool. Better to save final drafts to PDF which will keep the pagination you want. Professionals do document layout with industry standard tools like Adobe InDesign and Quark.

When it comes to file types and permanent storage – as in, stuff you want to keep longer than the software program that created it – I am a fan of good old RTF, or rich text format. It’s a universal file type that allows formatting like bold and italic but can still be opened by nearly every word processor past, present, and likely future.

Choosing A New PC Or Mac

question-computerA gig is a gig is a gig – 1,024 megabytes, sometimes rounded off as 1,000MB. So yes, hard drive sizes are consistent across Mac and PC hardware. Processing speeds are harder to compare. You can go digging across the Internet for all sorts of bench tests, but you’re better off comparing PCs to PCs and Apples to, well, Apples.

Typically a sub-$500 PC is not going to be worth the cost. In my experience they fail more quickly and catastrophically than more expensive models. A midline PC, in the $700-1,000 range, offers better and faster hardware. Laptops will be more expensive than desktops, and bear in mind that if you choose Windows 8, you’re going to want a screen with touchy-swipey capability for the best experience. That is, assuming you can find one; it’s not available for every model.

Macs may cost more, but in my experience they also make up for the price difference by outlasting their PC counterparts in the long run.

Troubleshooting Slow Web Sites

slowWaiting for web sites to load may be a function of your network connection and not your computer. Or, if your computer is gummed up with adware and malware, you’ll notice the drag particularly when using the Internet. For optimum speed you need to use a modern operating system – Windows 8, Mac, or Windows 7 as long as Microsoft deigns to support it – because you need to use a modern browser.

Your web browser is your window to the Internet. That means it’s also a vulnerable point. If your software is out of date, your connection will seem slow or you’ll be unable to load pages or images. The older the browser, the slower the connection, until you finally throw your hands in the air and buy a new computer. This is another reason it’s good to keep your software up to date, it’ll stave off that new computer moment as long as possible.

If you don’t know which browser you use, you’re probably using the default for your system. Common browsers as of this writing are as follows, but this information changes rapidly. Your best bet is to use the “check for updates” feature of the program to find the current version for your computer.

Windows 7 and 8

Mac

Note: there is no current Internet Explorer for Mac. If you’re still using the old versions, switch now!

Choosing A Mac Model

choose-appleThe easiest way to see the available Macs is to pop over to the Apple store: store.apple.com. They have a clickable list in the Mac section which shows the Mac model options.

In my experience, you are almost always better off opting for an iMac or a Macbook Pro than trying to cut corners with a Mac Mini. For one thing, you have to factor in the cost of the screen, and for another the Mini really doesn’t have the oomph for what most people want. You don’t have to go nuts on one of those bigger, expensive tower Macs. Those are usually purchased by designers and video experts who need the extra processing power and expandability.

When configuring a Mac using the Apple Store tool, get the fastest processor and best graphics you can for the model you want. You can always add more memory or a larger hard drive later, but with an iMac or Macbook you’re stuck with whatever processor and graphics card it has. You can go Macbook Air instead of Macbook Pro but remember you’re sacrificing processor speed for a lightweight form factor.

Apple Store has a nice comparison tool to help you make the choice.

Finding Discounts On Macs

I’d be remiss if I didn’t mention you can look for discounts on warrantied refurbished Macs on Apple’s site. You can also find discounts at Mac retailers like Mac Mall and OWC. A good time to buy is right after Apple announces new hardware; you can get a discount on older models that still have solid tech specs. (Insider’s tip: Apple usually has events in the spring and fall; the next one will be in March 2013.) If you’re an educator or student, be sure to check out Apple’s education discount. Many colleges and universities have deals through the campus computer store.

Ask Your Computer Questions On Tech Tips!

Do you have a computer problem? Leave a comment and let the Tech Tips community help. Your question could appear in a future Tech Tips article!

Image courtesy of (1) ddpavumba (2) Danilo Rizzuti (3) Idea go (4) Stuart Miles / FreeDigitalPhotos.net

Hybrid Devices: You Got Smart Phone In My Tablet!

I recently had the opportunity to test-drive the Samsung Galaxy Note II, a hybrid device that lies somewhere between a smart phone and a tablet. Are these hybrid devices just a fad or will they stick around?

From the review I wrote for The Northwest Herald:

The Galaxy Note is a hybrid Android device. At approximately 3.17-by-5.95-by-0.3 inches and weighing 6.44 ounces, it’s large enough that it may feel awkward while making calls. But the 5.5-inch HD Super AMOLED display (1,280 x 720) is so gorgeous that you might not notice. (read more)

These hybrid devices are called by a variety of names, including phablet which I personally think sounds phabulous. They can be powerful devices. The Galaxy Note I tested has enough oomph to run some seriously resource-intensive apps. Hybrids also have larger screens but are still portable enough to fit in a pocket.

I can understand the attraction of a device like the Galaxy Note. There are a lot of things I would do with my smart phone if it were big enough for me to see what I’m doing, and it would be nice not having to schlep a full-sized tablet around.

I’ve seen a lot of tech gadgets flash then fizzle. I remember when everyone and their brother had a Palm Pilot, and I recall Microsoft’s original attempt at a tablet. But the technology’s gotten to the point where the things we wanted to do with those devices is both possible and affordable, like handwriting recognition and the ability to watch video or play games.

So I think phone/tablet hybrids or phablets or whatever you want to call them will stick with us a while. They may not be for everyone but there is a segment of the market that wants a single device to replace the cumbersome smart-phone-plus-tablet combo.

As I reiterated in the column, you need to secure your mobile devices as well. Here are some previous Tech Tips articles on mobile security and more:

Disclaimer: Galaxy Note II provided by Verizon; my opinions remain my own.

Have you tried a hybrid device? Which mobile devices do you prefer? Share in the comments and don’t forget to  subscribe to Tech Tips by email and follow on Facebook. You can also follow @trionaguidry on Twitter.