Friday, September 18, 2009

Computer Security

The bottom line is - the internet is DANGEROUS out there. There are tens of thousands of viruses out there, with many more people trying to get into your computer. Ten's of thousands of people every year get their identity stolen THROUGH the computer, because they got a trojan that then recorded their credit card #'s when they were ordering something online.

If you are running windows, you become VERY vulnerable if you
1) Don't keep up with ALL the updates. This includes, windows, flash, java and acrobat reader [there has been recent attacks that automatically infect your computer if you are using a older version, even if you have ALL the windows updates]. Yes- there is the risk of the updates failing and messing up your computer (regular system maintenance will /prevent/ that most of the time) but you just have to deal with it if you want your system to be half-way secure.

These system updates are the "first line" of defense. They prevent most (but not all) of the attacks that automatically infect you by visiting a website (without clicking on anything) or opening a email (without opening the attachment). The reason they can do that is because there is a hole in the system itself, and you need to constantly patch those holes ("patches") when they are discovered.

The reason you are getting the "windows advantage" thing is because your system has been updating (probably automatically) and MS sneaks that in there. Eventually, you are FORCED to "prove" that your copy of windows is legit before you can get more updates.

2) Current Anti-Virus with a VALID subscription
I have seen so many machines that had anti-virus installed (when they bought the machine) but the subscription had run out and the software deactivated.
Go and CHECK to make sure it is actually valid. If you have not PAID MONEY for a new subscription (yearly), then most likely it is expired.

If you don't want to spend the money, then get the FREE version of AVG anti-virus (http://free.avg.com).

You will have to manually upgrade to the new free version they release every year or so [to keep you on your toes], but that isn't that big of a deal.

This will protect against traditional viruses that you get by opening attachments and downloading files off websites.

Also, make sure to remove the expired anti-virus first, as the programs can conflict.
If you have problems, you can download and run these specialized remover tools which will manually clean out all the files hiding on your system. I normally do it routinely as incompletely removed A/V software can prevent people from getting online, among other issues.
http://www.technibble.com/repair-tool-of-the-week-antivirus-removal-tools/

3) Spyware Software
This is the part that gets more complicated, because there is so MANY spyware programs out there.
Recently, there has been a trend of spyware pretending to be "real" anti-virus, and giving you all these fake warnings about your computer being infected. After clicking on it (and "installing" the program), it then extorts you for money before it will allow you to REMOVE the software [and/or make the messages go away] (and in the mean time, it installs trojans and all kinds of nasty stuff to track what your doing).

Most people notice when they are infected, when their computer starts running REALLY slow (because there is so many spy processes running, that it takes more computation time to do /that/ then it is to run your real programs). Another is when you get random pop ups for advertisements when you are not even online.

There is NOT one single program that can take care of all of them. Every few months, the programs that were effective fall back and new programs come into the scene that work better. I will just list the stuff that is FREE, as anyone can use it.

A) Spyware Doctor STARTER edition (Not "FREE" trial edition) - as part of the google pack (you can install only that and and uncheck everything else
http://pack.google.com
A good solid program that runs scans every once in a while by itself.

B) Malware bytes - The free version only supports MANUAL scanning (so you should run it once a month or so).
It is very effective and fast
http://www.filehippo.com/download_malwarebytes_anti_malware/

C) Super Anti-Spyware
The name makes it sound fake, but (so far) a lot of people have been having good success with it (including myself).
There is other programs that I would run myself after this, but they are more complicated to use and setup then this
http://www.filehippo.com/download_superantispyware/


4) Backup!
ALL Computers die all the time - especially hard drives [yes, even mac's].
Make sure to back up your pictures and documents regularly (and whatever else you can't replace).

5) Be Suspicious!
If you are browsing a website, and a pop up randomly comes up and says you are infected (citing a name of a program you have NEVER seen before).
Be very suspicious. You would not eat pills from some random stranger you met on the street - it could potentially be poisoned.
Go and VERIFY who it is, and make sure they are someone safe to get stuff from before you go and download a program.
You go to a doctors office or a pharmacy to get medicine.

Don't EVER give out your password online. If a tech support person needs to get into your account, they will have a way to bypass the password check and get in directly.

-------
If you DON'T like having to deal with all this, then get something else. Just because everyone else has a pinto doesn't mean it is the best car in the world. Get a mac or run linux (both of which have more stable systems and less viruses - for now, anyway). Windows CAN be safe and stable IF you are VERY careful with it and religiously stay up to date. It can be done, but it takes EFFORT to do so. Sometimes you need to run specialized software that is windows only (go and look - you can be surprised what has been ported over) and you just have to deal with it if you want to keep using that system.

A lot of people complain about mac's cost more, but if you INCLUDE the cost of time, energy and (occasionally) money to keep a windows machine secure (regularly getting it checked up by a professional), it can easily cost as much or more then a mac. I am NOT saying one is "better" then the other - I am saying it is a CHOICE, where there is plusses and negatives for BOTH and it is up to you to decide.

WOW! This got long really fast (hope this isn't too overwhelming for some of you), but there is a lot of stuff you have to be aware of.
Hope this will help some of you.

All of the above will protect you against 80% or so of the stuff that is out there.
It doesn't stop EVERYTHING, but it is a good start and some times the only defense you have is your head.

Monday, September 14, 2009

The other day, my brother asked me about setting up a webpage for his local group, so I came up with this quick evaluation of a couple of different options, and am throwing them up here for prosperity.
--------
There is a couple of different options that are available out here and they generally follow the line of
The simpler it is, the cheaper it is. Which has the plus side of making it easier to manage a website yourself and properly the next person after you will be able to use it.

Common options

Free
1) Google Apps/Pages
+ Free
+Really Easy to use,
+Still looks pretty damn good,
+supports multiple users (with some tweaking) - and even real time editing!
-How much you can customize it
2) Blog
+ Generally free,
+Easy to use,
+supports multiple users out of the box, for adding comments and new posts
+RSS
- VERY simple pages,
-Hard to make "static" plain pages that stay the same [for like standing schedules, routine documents,etc]

2)Paid Hosting somewhere (nfshost.com, pair.net,etc)
+Maximum amount of customization,
+can have a database online that can pull and manipulate data exactly as you like,
+can do all kinds of fancy and shiny things
+If done correctly, can look REALLY professional
-A lot trickier to setup
-If the one "tech person" who setup leaves the group, you're pretty much screwed most of the time
-or can look REALLY cheesy if done poorly

3) There is also "free web hosting" out there, that sticks advertising's onto your page and have all kinds of limitations that decrease of a lot of the benefits you would otherwise get.
Hosting from a company like nfshost.com is really cheap for small sites (often less then 50 cents a month) but still allows the same level of customization that you can get from one of the bigger companies.

Without you telling me explicitly what your needs are, I am going to suggest you give google apps/pages a shot.

If you already have a free google/gmail account, then I would say go to (http://pages.google.com ) and play around with the templates and see how the editing works, and how you like it.

------
If you DO like it, then your group can purchase a domain name (namecheap.com, godaddy.com, among MANY others) for about $10/year and then sign up for google apps and link them together (copy and paste a few numbers).

It gives you more features like..
Such as - Web Hosting, Email Hosting, Group mailing list, Shared Calendar's, Shared Documents and more.

Go checkout this description page [those videos do a good job explaining the benefits]
http://www.google.com/apps/intl/en/business/collaboration.html
http://apps.google.com
http://www.youtube.com/watch?v=wY2bpr1TAA4

and then sign up for the free version (which has gotten really tricky to find, recently)
http://www.google.com/apps/intl/en/group/index.html

You can do basically the same thing with a bunch of the free gmail accounts and sharing each new document/page you make with each other manually.

The main advantage with the app version (with a domain), is that you guys can have one unified web presence for your group, with one shared folder between all your members to keep track of everything.
You can send and receive email's using that same name, so it is clear which group you are representing when you are interacting with outside groups.

So for Example, lets say you could get example.com

people would go to http://example.com to see your webpage
if they wanted to send email, it would go to whoever@example.com

In the end, not that big of a deal, but it is surprisingly easy to setup and can make you guys look a lot more organized (if that is what you are going for).