Wednesday, May 27, 2015

Help! My Password Has Been Cracked


You’re not really sure How the Heck They Got Your Password, but they did, and now you’re freaking out. The password to one of your accounts has been cracked and you don’t know what to do to get control back of your account.
Let’s look at several things you can do to get control of your account and get things back to a secure state:
If Someone Cracked Your Password But You Can Still Log Into Your Account
The worst case scenario is that your account password gets hacked and the hackers change your password. Hopefully the security questions that you answered when you set up your account will help you regain control of your account and allow you to reset your password back and lock them out.
What if there aren’t any security questions? Many accounts have a password reset process that will allow you to initiate a reset using an email account that you have on file with the account provider. Unless the hacker has changed this email address, you should be able to regain control of your account by having the password reset link sent to your email.
If They’ve Taken Control Of Your Account and Locked You Out By Changing The Password
If the person who cracked your password has locked you out by changing your password then getting it reset might be a little more complicated. You may need to contact the account support line of the account provider and explain the situation, they should be able to verify that you are who you say you are via other means such as by looking at the phone numbers you have on file, verifying your address, or reviewing the answers to your security questions.
Make sure that you inform the account provider that this just happened and that any new information recently added to your account is false and that you want to place your account on hold until everything is sorted out. Reporting the password hack quickly is essential to limiting the damage.
If The Account Was Your Main Email Account
If your main email account is hacked then things can become even more complicated because, chances are, you have a lot of other accounts pointing to your email account for password reset purposes.
Thankfully most email providers have multiple ways of verifying that you are whom you say you are. Follow their account password reset procedures and if all else fails contact their account support.
The next step you should take after resetting your main (hacked) email account password is to change all passwords for any other account that you have that point to that account for password reset purposes. The reason: the password crackers could have initiated password resets for those other accounts.
Steps to Take To Prevent it From Happening Again:
Make Your Next Password Much Stronger
When creating passwords to replace ones that have been cracked, you need to create a much stronger, longer, and more complex password. For tips on creating strong passwords, check out our article: How to Make a Strong Password.
Use Two-factor Authentication If It’s Offered
Another way to prevent future account compromises is to enable two-factor authentication on the accounts that support it. Two-factor authentication usually requires some kind of token, such as a PIN that is sent by the account provider via an already established communication line that you have verified, such as a mobile phone or secondary email account. Other methods of two-factor authentication use fingerprint readers such as those featured on newer iPhones, iPads, and some Android devices.

5 Things You Should Never Post on Facebook

Facebook has become the Google of social networks. If you're not updating your status right now, chances are that you are uploading photos or taking some sort of odd quiz. We post tons of intimate details about our lives that we normally wouldn't share with anyone. We think that as long as we make sure our privacy settings are set correctly that we are safe and snug within our circle of friends.
The problem is that we never know who's really looking at our information.
Our friend's account could have been hacked when they installed some rogue application, or their creepy uncle might be using their account because they forgot to log out. For the sake of the safety of you and your family, there is some information that you should never post on Facebook. Here are 5 things you should consider removing or not posting to Facebook and/or other social networks.
1. You or Your Family's Full Birth Dates
We all love getting “happy birthdays” from our friends on our Facebook wall. It makes us feel all warm inside knowing that people remembered and cared enough to write us a short note on our special day. The problem is when you list your birthday you are providing identity thieves with one of the 3 or 4 pieces of personal information that is needed to steal your identity. It’s best to not list the date at all, but if you must, at least leave out the year. Your real friends should know this info anyway.
2. Your Relationship Status
Whether you are in a relationship or not, it may be best not to make it public knowledge.
Stalkers would love to know that you just became newly single. If you change your status to "single" it gives them the green light they were looking for to resume stalking now that you're back on the market. It also lets them know that you might be home alone since your significant other is no longer around. Your best bet is to just leave this blank on your profile.
3. Your Current Location
There are a lot of people who love the location tagging feature on Facebook that allows them to let people know where they are 24/7. The problem is that you have just told everyone that you're on vacation (and not at your house). If you add how long your trip is then thieves know exactly how much time they have to rob you. My advice is not to provide your location at all. You can always upload your vacation pictures when you get home or text your friends to let them know how jealous they should be that you're sipping an umbrella drink while they toil away at work.
4. The Fact That You Are Home Alone
It is extremely important that parents make sure their children never put the fact that they are home alone in their status. Again, you wouldn’t walk into a room of strangers and tell them you are going to be all alone at your house so don’t do it on Facebook either.
We may think that only our friends have access to our status, but we really have no idea who is reading it. Your friend may have had their account hacked or someone could be reading over their shoulder at the library. The best rule of thumb is not to put anything in your profile or status that you wouldn’t want a stranger to know. You may have the most stringent privacy settings possible, but if your friend’s account gets compromised than those settings go out the window.
5. Pictures of Your Kids Tagged With Their Names
We love our kids. We would do anything to keep them safe, but most people post hundreds of tagged pictures and videos of their kids to Facebook without even giving it a second thought. We even go so far as to replace our profile pictures with that of our children.
Probably 9 out of 10 parents posted their child’s full name, and exact date and time of birth while they were still in the hospital after delivery. We post pictures of our kids and tag them and their friends, siblings, and other relatives. This kind of information could be used by predators to lure your child. They could use your child’s name and the names of their relatives and friends to build trust and convince them that they are not really a stranger because they know detailed information that allows them to build a rapport with your child.
If you must post pictures of your children then you should at least remove personally identifying information such as their full names and birth dates. Untag them in pictures. Your real friends know their names anyway.
I would be a hypocrite if I said that I have completely removed all tagged pictures of my kids on facebook. It is a daunting task given the amount of pictures that we take as proud parents, but I have started on it and I'll do a little bit each day until it's finished.
Lastly, think twice before you tag pictures of the children of friends and relatives. They might not want you tagging their kids for the reasons mentioned above. You can send them a link to the pictures and they can tag themselves in place of their children if they want to.

Tuesday, May 5, 2015

How Hack-proof is Your Wireless Network?

You set up your wireless network many years ago and then you forgot about it because you don’t want to mess with something as long as it’s working. As the old saying goes: “if it ain’t broke, don’t fix it”, right? Wrong!
When you set up your router initially, you remember setting a password, perhaps turning on wireless encryption, but your memory is hazy and you don’t really know the exact settings.
So here we are. Your wireless network router is doing its thing in a corner, gathering dust, but you really don’t know if it’s even hacker-resistant.
Let’s take a quick quiz and see just how secure your wireless network is. Answer the following questions and at the end of the article we’ll tell you what your security posture is and what you can do to improve it.
Give yourself a point for every question you answer yes. While no network is truly "hack-proof" we'll tell you how we think you're doing at the end of the quiz.
1. Does Your Wireless Network Have WPA2 Encryption Turned on? (+1 point if Yes)
Your wireless network needs to have encryption turned on in order to protect data traversing it, as well as providing a way to keep unwanted users from freeloading. The type of Wi-Fi security used makes a big difference.
If you're using outdated WEP encryption, then you are highly vulnerable to having your network cracked by even the most novice hacker. WEP is extremely vulnerable to compromise and there are tools available on the Internet that can crack WEP encryption in a matter of minutes.
If you aren't using WPA2 encryption, you should be. Check out our article: How to Encrypt Your Wireless Network for details on implementing WPA2.
2. Does Your Router Offer a Firewall Feature And is it Turned on? (+1 point if Yes)
Most modern wireless routers have a built-in network firewall that can help protect your network from unwanted traffic attempting to enter and/or leave your network. This can be a valuable tool if configured properly. Check out our articles on How to Configure a Firewall and also How to Test Your Firewall to see if it's doing its job.
3. Do You Have a Strong Password For Your Wireless Network? (+1 point if Yes)
A strong network password is essential in preventing brute force password attacks. Check out our article on How to Change Your Wi-Fi Password if you think yours might not be a strong enough password.
4. Did You Change Your Wireless Network Name to Something Unique? (+1 point if Yes)
Using a simple, common, or default wireless network name can also put you at risk for getting hacked. Read our article: Is Your Wireless Network Name a Security Risk to find out why it might be.
5. Are You Using a Personal VPN Service To Protect Your Network? (+1 point if Yes)
A personal Virtual Private Network (VPN) can be an excellent tool for protecting the data on your network and can also provide features such as anonymous browsing. Learn about the many benefits offered by personal VPNs in our article: Why You Need a Personal VPN.
6. Is Your Wireless Router's Firmware up to Date? (+1 point if Yes)
If your router's firmware is out of date then you may be missing out on security patches that could help fix router-related vulnerabilities. You may also be missing out on new features that are sometimes offered in updated firmware. Check with your router manufacturer to see if there is any updated firmware available for your specific model.
Your Score.
If you answered "yes" to all 6 questions, then your network is about as secure as they come. 5 out of 6 isn't bad either. Less than 5 would indicate that you may have some security issues that need to be addressed soon so that you are better equipped to sustain a wireless hacking attempt. Try to implement all 6 items to give yourself the best odds of not becoming a wireless hacking victim.