Password Security, Windows 10 settings that need to be turned off, Chromebook use by Date

Good morning.  In today's blog,

- These are the 20 most common passwords leaked on the dark web — make sure none of them are yours

With no end in sight for the Ukraine/Russia conflict and the threat of Russian cyber warfare, it is important for everyone to assess their password strategy to secure their online data.  see below for more info.

- Turn Off These Annoying Windows 10 Settings

One of the default settings in Windows 10 allows Microsoft to use your computer to provide updates to other users on the web?  That's right, your computer and internet connection are being utilize world wide as an update server.  See this section below for more information.

- Before You Buy a Chromebook, Check the Expiration Date

Are you considering buying a Chromebook?  Be sure to check your expiration date.  Who'd have thought, Chromebooks have a use by date?

https://www.wsj.com/articles/before-you-buy-a-chromebook-check-the-expiration-date-11646538322?st=8yr80fa3kya5zw5&reflink=desktopwebshare_permalink

These are the 20 most common passwords leaked on the dark web — make sure none of them are yours

CNBC has published a list of the top 20 passwords found on the dark web.  Many of these I have seen in use or a slightly different version from some of those listed.

Password security is a pain I know but it is your only defense in protecting your financial and personal data from being stolen and causing much more pain.

Some of the things you can do is change your passwords on a regular basis and do not reuse passwords either on the same account or use the same password for multiple accounts.  The first thing hackers will do once they have compromised one of your passwords is to try that password on your other accounts.

If you change your password do not perform a simple change such as adding 1 to a number, i.e. Blah987 to Blah988.  They know this trick.  They are equipped with powerful cracking programs that can perform millions of combinations and permutations of passwords based on a cracked password in minutes.  With many computers and lots of compromised systems working for them, they have time on their side.

To see the 20 most compromised passwords, follow the link below and then check the chart below to see how your password stacks up for complicity.

 Most common passwords hackers leak on the dark web: Lookout report (cnbc.com)

If your password wasn't on the list above then just how safe is your current password?  The chart below project just how long it would take a computer to crack your password.

The Y axis depicts the length of your password while the X axis lists complexity.

Turn Off These Annoying Windows 10 Settings

Did you know the default setting in Windows 10 allows Microsoft to use your computer to provide updates to other users on the web?  That's right, your computer and internet connection is being utilize world wide as an update server.

Microsoft plans to roll out Windows 11 to all eligible computers by mid 2022.  That said, if you have a computer that does not meet the hardware requirements to upgrade or prefer to stay with Windows 10 then read the following article and change these settings to improve your computer performance and Windows 10 experience.

https://www.msn.com/en-us/news/technology/windows-10-settings-you-need-to-disable-now/ar-AAOPTLU?ocid=msedgntp

DForce Intel based Windows 11 Workstations

https://drive.google.com/file/d/15EUghuRhwZbYitLvbLrhqncIbyYhNP_y/view?usp=sharing

Device Security - Time to rethink Mobile Security - CCleaner, not exactly free.

Is it time to consider SmartPhone security?

Your online privacy is under constant threat these days from every direction conceivable including software you install.

I spent yesterday with my CPA talking taxes, finances and data.  My CPA is extremely concerned about data security and we were taking steps to secure and make sure his PCs were protected against any threats.  However the main threat to security may not be your computer but your always connected smartphone which people are using to do banking, place shopping orders and more.

Smartphones are like having an open window allowing everyone into your world.  I mean you are carrying a LoJack system in your pocket  It's tracking and relaying where your present location.  Even if you're not using GPS it is still pinging cell towers and GPS satellites can still see you.  In other words, you can run but not hide.

It's been said that the world's most secure smartphone is the one at the bottom of a river.  So what to do?  To stay abreast and keep up in today's modern world a smartphone is a must.  The link below is to an article which lists the 4 best phones for privacy and security.  #1 may surprise you but it is still the preferred device used by many governments around the world.

https://smartphones.gadgethacks.com/how-to/4-best-phones-for-privacy-security-0176106/

In the past year, some clients and people I know have had their email and online accounts hacked.  Many times scans of their system revealed nothing.  I ask if they possibly responded to a phishing attempt.  Almost always the answer is no.  In each case, the compromised email account and equivalent phone app was also on their smartphones.  I'm beginning to wonder if its time to take smartphone security more seriously.  It could be the weak link in your online security.

Consider these facts from Malwarebytes online forum.

"These hacks aren’t happening in a vacuum. Mobile malware is a frontier ripe for cybercriminal activity. According to a 2015 Pew Research Center Report, nearly two-thirds of Americans own a smartphone, and roughly one in five of those users conduct most of their online browsing using their phone instead of a computer. The reality is that as more and more people use their phones to go online, more cybercriminals will hear the call."

 “Everything from backdoor malware that steals personal information to ransomware that locks your phone until payment is made exists in the mobile space. With millions of malware samples in the wild, there is no reason not to be concerned.”

https://blog.malwarebytes.com/101/2016/09/top-10-ways-to-secure-your-mobile-phone/

New Wi-Fi attack cracks WPA2 passwords with ease

The common Wi-Fi security standard is no longer as secure as you think.

https://www.zdnet.com/article/new-wi-fi-attack-cracks-wpawpa2-passwords-with-ease/?ftag=TRE-03-10aaa6b&bhid=2219791

Beware the Software Santa.  Free comes with a cost.

CCleaner, a software I used in Windows 98 days is currently in trouble with users due to unwanted monitoring and collection of data.  This is just the latest incident for the company.  Last year it was modified by hackers and used to serve malware.   CCleaner is available from Avast (Piriform) and is used to scrub and optimize all kinds of devices including Windows, Macs and mobile devices.

In the latest version 5.45, the company added features that many users were not pleased about.  The features in question are used for data collection.  The collection of data is performed by tasks called Active Monitoring and heartbeat which continuously send user data to CCleaner servers.  The company claims that nonpersonal and nonidentifiable data only is sent to servers, however, the difficulty in opting out is frustrating many users.  If you close the program it only minimizes and to close the program it has to be forced closed or the service stopped.

When servicing client systems I almost always find malware and PUPS (potentially unwanted software) installed.  These items compromise system security and performance.  Often times these programs are installed along with legitimate software by the user during the install process.  It is important to pay attention to the install process to make sure that you don't install more than you intended especially when Googling and installing free software.  Always pay attention to your search results and don't select a search result that isn't a direct link to the desired software or is listed as an ad.  The software may be advertised as free but they are trying to get paid.

https://www.zdnet.com/article/cc-cleaner-provokes-fury-over-active-monitoring/?ftag=TRE-03-10aaa6b&bhid=27630927001468733386426006914379

Go Fast with any one of these premium Intel Gen 8 based workstations equipped with a Solid State Drive (SSD)!

Types of Major Websites affected by Heartbleed bug; Michaels Stores confirms data breach, 3 million cards affected

In the aftermath of the Heartbleed bug, LWG Consulting has provided a chart that serves as a guide to what websites and passwords you should be concerned about.

This list is only a guide and may not apply to each and every financial institution or web entity.  Some websites may not fit exactly in the categories.  However, there are certain large companies on the list that everyone uses  Click on the link below.
.

http://www.lwgconsulting.com/news/sites_affected_by_heartbleed_bug.aspx​

For what it's worth, high NET or wealthy individuals, it is recommended to have a banking only computer. This computer is to be used for nothing but banking, no Facebook, EMail, surfing whatsoever.

There is a very good TV series on CNBC, "American Greed."  Two segments in the series dealt with online Cyber Fraud.

1.  The Fake PC-Optimizers/Fake anti-virus scams.  The overall take with this one operation exceeded $160 million.  I cannot find the CNBC segment now but here is a link about the story,

http://arstechnica.com/tech-policy/2012/10/ftc-gets-a-163-million-judgment-against-scareware-operation/

2.  The Zeus Trojan horse, allow hackers to access online bank accounts and steal millions virtually undetected. But there are ways to avoid being victimized

.

http://video.cnbc.com/gallery/?video=3000213289

Michaels Stores confirms data breach, 3 million cards affected

http://www.zdnet.com/michaels-stores-confirms-data-breach-3-million-cards-affected-7000028563/?s_cid=e539&ttag=e539&ftag=TRE17cfd61Michael's Stores Data Breach, 3 million customers