Malware, viruses, hacks, and anything else that may compromise your identity online, computer, or digital device.
Security and Privacy
Citizenfour is an Academy Award winning documentary on the story of Edward Snowden. He was a contractor for the NSA as a systems administrator working out of Hawaii, and that's how he was able to obtain information. What he did with that information is what became so controversial. He went to Hong Kong, and contacted journalists to give them this information he had collected, but didn't want anything released that would risk the lives of government operatives. Instead, he wanted journalists to tell the world, Americans in particular, what the NSA had been up to.
Ray is concerned with security on his tablet, and is wondering if he should have antivirus for it. Leo says that mobile devices are designed in an era where malware is a serious threat, so these newer operating systems are inherently safer because they tend to be sandboxed. If he still wants some added protection, LookOut is a very good antivirus app. That being said, Leo doesn't use an antivirus program.
Rick's wife got unlimited cell service for him, and he wants to know how to keep his tablet secure while at a hotspot. Leo says that by using his own cell service, his data is encrypted and safe. But if he's relying on Wi-Fi hotspot, then he'll have to be sure his passwords aren't given out in the clear. Especially if it's bank information. But even then, he's dealing with an encrypted portal, so it's pretty safe. He'll want to turn on encryption for his email, though.
Ed thinks his HTC One Android phone has been hacked. Can it be tracked? Leo says that every cellphone made is trackable. In order to use a cellphone, he has to connect to a tower, so it's able to triangulate his position at any given moment. If he's worried about that, then he shouldn't have a cell phone.
Mark hears that when downloading Java, junkware downloads with it. Leo says that Java is now being bundled with adware, so he should make sure he unchecks the option. Better yet, he shouldn't download and install Java unless he needs it.
He should also make sure that it doesn't load automatically in his browser, which is a security issue. Java uses Kommodia, which actually breaks the encryption technology of a browser. So Marks' wife should remove it immediately.
With news that Lenovo has been caught using man in the middle attacks to insert adware into user browsers, Leo says that we must send a strong message to them that this is unacceptable. Lenovo claims the Superfish "add-on" was only added to consumer products to provide targeted ads in browsers, but Leo says it's malware and it deliberately violates the trust between consumers and manufacturers.
A sophisticated malware attack has robbed hundreds of banks in 30 nations, including the US, Russia, Japan, and Europe. According to a report from Kaspersky Labs provided to the New York Times, upwards of $300 million dollars was stolen, which could make this one of the largest bank heists ever.
Back in 2013, in what has been the largest hacking theft in history, hackers used malware to break into the computer networks of several major banks and stole over $300 million worldwide, and could actually be three times as large, the largest theft in history. No bank has come forward claiming they were victims and security firm Kaspersky has been retained to investigate. Leo says these attacks happen all the time and that Banks cover it up to prevent clients losing faith in the institution. How did it happen? It appears to be the old phishing scam with bank employees as the target.
Hackers broke into the Anthem Health database to obtain names, birthdays, addresses, and Social Security numbers of customers. An estimated 80,000,000 records have been lost. After the hack, there have been phishing scams circulating and phone fraudsters calling people to obtain financial information. If you do get an email from Anthem, do not click the links, go directly to the Anthem website. If you get a call from someone claiming to be from Anthem, hang up and call them back using their posted phone number.
The internet is a public place, and whatever you post to it is out of your control. The one exception to this is encrypting your data, however. This will ensure that only you and the recipient will be able to read the data. Here are a few open source tools for public key encryption: