Tuesday, March 31, 2009

Worried about the Conficker virus?

First things first... Run the online scanner from microsoft found at http://onecare.live.com/site/en-us/default.htm?s_cid=sah

Then panic...

hahahaha, Just kidding!

Update your virus scanner software definitions and make sure windows update has downloaded the latest security patches...

If your already infected that's another story... Send me a message if you find that you are already infected and can't seem to clear it out on your own...

Cheers!

Friday, March 27, 2009

Online Security, does it make you nervous?

Online security is to say the least something that makes most people nervous. Ask someone if they are comfortable with online purchasing, banking and just general electronic fund transactions. They will likely look at you like a green eyed monster and tell you about some horror story they heard about on the news or experienced first hand. There is no doubt that as technology makes it easier for the merchant to take money from your pocket, the thieves will follow in hot pursuit.

I do my share of online transactions, in fact a lot of what I do to make a buck is online. Not as a merchant with a store front but through the years I have forged relationships with companies overseas, through email, in person etc. This lets me purchase products and then resell them online at auctions like eBay or through word of mouth with friends etc. It is something that has been steadily growing and while it's not something that pays the mortgage yet it does help out.

Paypal and eBay being two of the largest money movers on the internet both present a blessing for consumers and a stumbling block for merchants. On one hand, paypal offers a great way for a merchant to accept payments without the hassle of trying to win the trust of the customer, but at the same time the horror stories about paypal accounts gone bad and stolen credit card numbers has people on edge about using the service. It is no surprise really that most of the people I talk to day to day are afraid to use their own paypal account even when they signed up years ago... They tell me they just never used it because they are afraid. Most in fact, don't even have their paypal accounts linked to a credit card or bank account. And who can blame them? I wouldn't want my account information stolen either.

Recently when signing into paypal however, something I do almost daily. I was presented with a new option. For a small one time fee of 5 dollars, paypal would send me a little plastic key chain device with a single button on it. Pressing this button generates a 6 digit number for which only paypal and eBay can understand. How does this help me? Well, now when I sign into either eBay or paypal. After entering my username and password it then asks me to press the button and enter the number that was generated. A new number is generated every 30 seconds and so you can't just sniff it out on a network to log in and once the number is used their servers instantly require a new number for subsequent logons.

Finally, a way to securly log into these services. I always had the fear in the back of my mind that one day from a hotspot or even on my own network some sneaky thief would sniff out my username/password. Now it's just not possible and I love it.

So now your asking yourself, so what if you lose the key fob? What then smarty pants. And my answer to that is... You have a phone number registered on file, you can login and click a link telling them you lost or forgot your fob somewhere and the system will call you at the designated phone number and give you a temporary access number. You can then request that another fob is sent to you.

Brilliant I say, and if you use either eBay or Paypal, you should get this little device on your side ASAP.

Clicking our way through life, one link at a time...

Thursday, March 19, 2009

Linux Security Permissions...

I had just installed the latest Ubuntu on a machine last night and got a couple users set up then I noticed something wrong.. Something seriously wrong... All of the users had access to each other's home directories. I believe this is true of all Ubuntu installs these days and I'm not quite sure why it's set up that way but here's how to clean it up a bit...
This was done in Linux Ubuntu...

I will assume that you are the owner of $home/user

I will also assume that you know how to open a Shell and enter some commands. The one we are going to use here is called CHMOD.

First a bit about how hexadecimal based file permissions work. The order of our three digit number XXX is;

Read =4
Write =2
eXecute =1

And the three XXX's are like USER/GROUP/WORLD permissions.

So to figure this out you simply add up your permissions. If you wanted to give full permissions you would add 4+2+1=7 therefore if you wanted to give everyone access to everything you would set your XXX to 777 but this would be insanity as your files would not last very long in a human world :)

I suggest you give user full permission so XXX looks like 7 groups should have read and write access so set that one to 5, remember read=4 + eXecute=1 so we got 5... your XXX now looks like 75X. So what about the rest of the world? well since some things like web pages need some sort of basic access to files we will set Read on the last bit so the now looks like 754.

So now you have files that you don't want other users to have access to in $home/user/MyPrivateFiles

The linux command to do this (REMEMBER TO SUDO or ROOT)

chmod -R 754 $home/user/MyPrivateFiles

the -R command will recursively go into each directory and modify the permissions of the files contained in MyPrivateFiles...

Hope that helps you secure your machine,
Cheers!

Monday, March 9, 2009

Classic Arcade Sounds...

Possibly one of the geekiest things anyone has done but obviously done by someone of the same era as me... It brought a sense of nostalgia from my past and I think anyone who is between 30 - 50 years old should definitely check this site out... The person who made these recordings is a brilliant artist...


:)

Cheers!