Smartphone Security

Computer Care: Keep your smartphone secure against malware, infections

By Arthur Glazer

glazer.tech@gmail.com

	POSTED: April 20, 2013 1:00 a.m.

Today’s smartphones allow us mobile access to so much more information than ever before. We can take charge of our schedule, email, texts, social networking, computing, Web browsing, banking and more. But what if you weren’t the only one that had control of all that sensitive information in your mobile phone?

Security applications are currently available for smartphones and most of them are free, but few of us take advantage of them. All it takes is for you to download and install an app that clandestinely allows another user to have the same access and control over your phone’s information as you do. There goes your contacts list, your photos and perhaps your checking account.

According to Symantec, there have been hackers who installed their own code in apps that were downloaded from the Internet that allowed full access to mobile phones, sensitive data and banking info included.

Last year, more than 32 million Android phones became infected with malware. That’s three times the amount of the previous year.

Currently, Android phones are more susceptible to these rogue infections than iPhones, simply due to the fact that Apple only allows downloads from its app store. With Android, you can get an app from anywhere.

The best course of action is to scrutinize what you download to your phone and use only trusted sources for those downloads.

If you must live on the computing edge as I do, at least install some protective utility to your phone. Most anti-virus companies that have apps for computers, also have apps for phones, and as I mentioned, many are free.

I now have a comprehensive utility called Advanced Mobile Care 3.0 on my Android. It is from Iobit, the folks who created Advanced System Care for your computer. So far, so good. It’s easy to use and to my knowledge, I have not been infected.

What they call a Swiss Army Knife of tools for the mobile user, it scans for viruses and malware, cleans clutter, has a battery saver, protects your privacy and has the ability to kill tasks, if necessary. It’s available from iobit.com or from Google Play on your phone.

The folks at AVG, McAfee, Symantec, Trend Micro, Dr. Web, ESET, Avast, Kaspersky, F-Secure, Sophos, Lookout Security and others have similar apps for download. Just as with tools for your computer, most offer free utilities as well as their premium versions of the same programs with more bells and whistles and better security. In the end, you get what you pay for.

You need to decide which you want by trying one or two. See how they work on your phone. Is the interface easy to use? Does it use too many resources that finding your way to other apps become encumbered? Does it have the intended protection?

Go to the App Store (iPhone) or Google Play (Android) to see what’s currently being offered. Remember what’s at stake here. Even the paid premium versions of the security app cost only a few dollars. For what you get in return, it’s worth a few bucks for the protection.

Some of these utilities offer more than others, so take a few out for a test drive. Security is what we are after here, but if a junk cleaner or battery extender is thrown in, it may be worth considering.

When I look for an app to download, I take heed in what other users have said about it in feedback. Google Play is similar to CNET’s download.com in that there is user feedback. If too many users agree the utility is hard to use or it freezes their phones, I move on to the next one.

Often it’s the phone that had issues, not the app. So pay attention if it’s all HTC users or everyone with a Samsung that can’t use certain apps; it may not be the app.

Don’t feel too superior if you are an iPhone user. Just as with Apple computers, you are not invulnerable. Virus and malware writers have focused on PCs due to the sheer volume of them versus Apple products.

Now that Apple has a huge market in the mobile phone arena, it’s only a matter of time until the iPhones begin to become infected, too. It’s time we all took a hard look at our mobile phone security.

The ACLU recently argued with the FTC that AT&T, Sprint, Verizon and T-Mobile do not offer adequate security for their mobile customers. Although Google has beefed up security more with each new version of its Android Operating System, the phone companies have not.

Be it so, or not, I wouldn’t wait for your carrier to provide a defense against hackers for your mobile phone. It’s your phone, your data and ultimately it’s your responsibility.

Arthur Glazer is a freelance writer and computer technician in Gainesville. His column appears biweekly on the Business page and on gainesvilletimes.com.

Make your PC defensive

POSTED: March 9, 2013 2:00 a.m. Computer Care: Keep your PC protected from bad bugs

Computer Care: Keep your PC protected from bad bugs By Arthur Glazerglazer.tech@gmail.com POSTED: March 9, 2013 2:00 a.m. Too many computers that I’ve worked on recently have had insufficient protection. Some had anti-virus apps or Internet security suites installed, but they were not properly configured. Some were so outdated they were completely ineffective. Your system needs a good defense. This means programs that will have your back and warn you when rogue programs or websites are attempting to infiltrate your computer. If you have an anti-virus alone, then I suggest you supplement it with a utility like Malwarebytes, Advanced System Care, SuperAntispyware or Malware Fighter. You can have as many of those installed on your system as you like but only one anti-virus app. In that case, more is not better. If your system has an Internet Security Suite, you’re all set. Many times, though, it will tell you that there is a conflict with a utility already on your system and ask you to remove it. Whatever you use, be sure you always have the latest version and that it updates its virus and malware definitions regularly, usually daily. The app needs to be configured past the default settings. Make sure it scans what you want it to, not just your “C” drive. If you have a partition or use external drives regularly, have them scan them as well. Be sure to set up a schedule in the settings area. If you are online every day, you should have your system scanned daily. If you don’t, it’s not a matter of if you will get an infection but when. There are plenty of free products to download. Avast, Avira, AVG, Panda and others all have free and paid versions. The latter includes support. Vipre is also a good choice and although it lacks a free version, it does offer a free trial, as do most. In most malware apps, there are no schedulers on the freebies, one reason alone to get the paid version. While you are downloading, be careful as I mentioned in previous columns. You may not get a malware infection from a reputable website, but you can still get bloatware or junkware, call it what you will. If you don’t scrutinize each box that is checked, you may end up with add-ons you didn’t ask for like a screensaver, pop-up, toolbar or some other freebie that will slow down your system. Do take note to the many offers of security for your smartphone, though, while you are downloading. Most are free. The next wave of infections will not be on your computer but on your phone, so get ready. All of the major players have these to offer. Even with the best protection, it is still possible to get an infection on your computer. The reprobate-geek on your block may have just written a virus and sent it to the Web to be spread around. Before Avast, Norton, McAfee and the rest of them get a chance write a defense against the infection, you can get it. Sometimes you simply fall through the cracks of the Internet. All you can do is be as best prepared as possible and when that fails, get rid of the infection after the fact. Although it is best to be proactive, sometimes you just have to play the cards you were dealt. Windows has built-in tools like System Restore and Safe Mode that will let you fix issues with the operating system. System Restore is like a time machine. It allows you to set the system to run as it did in the past, when it functioned properly. Safe Mode loads only the essential components of the operating system, allowing you to probe and repair without a bunch of superfluous apps running in the background. The Internet itself is my favorite tool. When I don’t know how to fix something, I Google it. There are many articles, forums and YouTube videos to help with just about anything. Someone, somewhere, has had the same issue that you are experiencing and there is assistance on the Internet concerning it. The only time I suggest you don’t try to fix your computer yourself is when you get a “Fatal Error.” They manifest themselves as “Blue Screens Of Death.” When you see a blue screen with “Fatal Error” on it that is accompanied by a STOP code, a series of numbers, it’s time to throw in the towel. Often, the more you mess with it, the worse it gets. So just walk away from this one. This is the worse-case scenario, when your head starts pounding and your eyes begin to bleed. This is when you call someone and pay them to fix the computer. Sometimes it’s just worth it. You wouldn’t try to fix a crown in your mouth or the transmission in your car. You call a professional. With a BSOD, that’s what you need to do. Arthur Glazer is a freelance writer and computer technician in Gainesville. His column appears biweekly on the Business page and on gainesvilletimes.com.

Phishing for data

Computer Care: Don’t take the hook with data phishing games

By Arthur Glazer
arthur@glazerthepctech.com

POSTED July 3, 2009 11:41 p.m.

Phishing is a relatively new term that has roots in its homophone water sport, in that it means one is looking for something that’s not readily available. But as opposed to looking for fish, it is searching online for data: yours.

Those phishing for your information are not phooling around. Unlike its fun counterpart, phishing is not a leisure sport. It’s a full-time business. It employs professional thieves stalking you on the Internet.

The most common phishing trap you could fall for is the e-mail scam. You might get something in your inbox that appears to be from your bank, utility, retailer or credit card company. The ploy is to get you to refresh or confirm your personal information because your account is supposedly being updated or is about to be closed. It preys on your fears and hopes that in your moment of anxiety, you’ll cooperate.

Upon close scrutiny, you can usually tell that these are fraudulent e-mails, but most people are trusting by nature and are tricked into believing they are legitimate. Usually you will not be addressed by your name, but as Client, Patron or Card Holder. The threat may be somewhat vague, yet specific enough to get your attention.

Other e-mails may include a link for you to click on. This will take you to the phisher’s Web site, which may look like those that you do business with, but is not. It will include a blank form with an official-looking header of that company. Any information you type in is then given to the thief, whether it be your account number, password, Social Security number or pin code.

Again, scrutiny will be the tell-all. Look carefully at the web address. It may have your bank’s name in it, but instead of being "www.your-bank.com," it may read something like "www.ag.accounts.your-bank.com."

A good way to tell if a link is legitimate is to hover your mouse over the link. The true destination will appear either in a pop-up or in the browser’s status bar at the bottom of the page.

Alternatively, you may receive an official sounding phone call asking for the same information.

They will be friendly, yet assertive, requesting your personal information. If you didn’t call them, hang up. I guarantee if you ask them for a call-back number, they will hang up on you.

Your bank will tell you that they would never contact you this way. Be aware; be careful; be suspicious. There is a lot at stake: your money or even your identity. If in doubt, call or go to your bank or institution in question.

As always, your best offense is a good defense. Have the proper tools in place and the knowledge of what to do to protect yourself.

Get and use good anti-virus, anti-spam and anti-phishing utilities for your computer and be sure your firewall is in place.

Many companies now have either free downloadable utilities or offer free scans from their Web site. Check out what McAfee has to offer at http://home.mcafee.com/Downloads/FreeScanDownload.aspx?affid=0; McAfee also has a free Site Advisor available that will let you know if the site you are on is legitimate or not.

See what Symantec has at http://security.symantec.com/sscv6/WelcomePage.asp or look at AVG’s LinkScanner at http://linkscanner.avg.com.

Comodo has recently released a new, free utility, Comodo Internet Security, to assist in keeping your system free of malware. It includes a firewall with anti-virus and even comes with a 30 day free trial of LivePCSupport. Download it from their website at http://personalfirewall.comodo.com/download_firewall.html.

Any of these companies also offer full version utilities with more bells and whistles, for a price.

Visit www.staysafeonline.org for some good information including a list of more web sites that will give your system a security scan for free. Here’s a list to help you get started:

Know who you’re dealing with online.

Never click on links in unknown e-mails.

Keep your Web browser and operating system up to date.

Back up important files.

Protect your children online.

Use security software.

Use strong passwords and change them regularly.

Use strong authentication technology.

Don’t use public computers to do your online banking or bill paying.

Learn what to do if something goes wrong.

Other good online resources are www.onguardonline.gov and www.fraud.org.

If you believe you’ve been scammed, file your complaint at www.ftc.gov, and then visit the FTC’s Identity Theft website at www.consumer.gov/idtheft.

Computers are great tools and the Internet is an incredible resource. To think about what the two of them together can accomplish is astounding. But if you’re not careful, you may get caught in someone’s phishing expedition.

Keep your eyes open and be aware of your surroundings as if you were in a bad part of town. These guys don’t phish or cut bait as those in a boat do. They are relentless. Just because the Internet is a virtual place, doesn’t mean you can’t really get ripped off. You can.

It’s virtually the same.

Arthur Glazer is a freelance writer and computer technician in Gainesville. His column appears biweekly. Arthur welcomes your computer questions and ideas for future columns.

Creating Passwords That Work

Computer Care: Complicated passwords will keep you safe

By Arthur Glazer
arthur@glazerthepctech.com

POSTED April 10, 2009 9:52 p.m.

The easiest forms of passwords are your children’s names, perhaps your pets, your address or birthday. But guess what? They are the most common ones and hackers know that. They will try those first. With just a little research your password is broken and your security is gone. Fluffy1? I don’t think so.

So what is a good password? I’m glad you asked.

First, don’t use a universal password. If a hacker guesses one, he gets them all. Use different passwords for different things.

Next, change them on a routine basis. Keep the hackers guessing. If you can’t remember them, use a password manager, but we’ll get into that in a moment. But by no means should you have sticky notes framing your monitor with your secret names on them. It’s like writing your PIN on the back of your debit card.

Change the temporary password that you’re given by your ISP, bank or router software. Don’t keep 0000, Admin or password as your password. It’s just not a good idea. Sure, it’s easy, but you know someone other than you already knows it.

Last, but equally as important, use at least eight characters (some say 10-14) and mix them up. By that I mean use upper and lower case letters, as well as numbers and symbols. It makes hacking that much harder. The password RenruT*63 is infinitely better than mykitty or fluffy1, and gives your computer a considerable defense.

RenruT, you ask? This is what I like to do. Use acronyms that make sense and spell things backwards. Then, top them off with numbers and symbols. If your name is Turner and the last two digits of your address or birth year is 63, you could safely (until now) use RenruT*63. It’s strong and easy to remember.

How about Wolfe? It becomes Eflow or efloW and spiced up could be EfloW#87, a strong password. Of course, the longer the word is, the stronger the security.

Alternatively, you could make up sentences and remember the abbreviations. Try something like, MdLiaAS11#, which for me translates to: My dog Lola is an Australian Shepherd, eleven years old. It’s a 10-character password using upper and lower case letters with numbers and symbols.

Mbhind2#5911 could be, "My brown house is next door to number 5911." Whatever works for you. Be creative. Make it something you can recall, but mix it up. No password is totally secure, but some are obviously better than others.

For those who have trouble remembering, there are password managers. You could let it do all the work for you and to make it secure, have the manager itself be password-protected. This way you would have only one word to remember.

Go to www.roboform.com and check out their product. I’ve mentioned this one before; it’s a good one. Roboform is a password manager that also fills in forms for you. When you get to a web page that requires a secure login, it jumps into action by signing you in. Should there be a form to fill out, it will type your name and address as required. How cool is that?

The free version is good for 10 different web sites, with no time limit. For more than that you’ll have to purchase it. The paid version ($30) is for an unlimited number of sites. You could also have it generate random passwords for you, and then have it remember them.

There are others on the market, some included in utility suites. Go to www.download.com and initiate a keyword search for "password manager."

Having a strong password plays such an important role in computing, now more than ever. There are people out there whose job it is to get your personal information. If they don’t use it for themselves, other people pay them for that information.

Your bank or ISP will never call or e-mail you and ask for your password. If it does happen, it’s a scam. Tell them nothing. If you aren’t careful, your bank account could be cleaned out before you even realize it. Not only would you lose your money, but the bad guys will probably never get caught.

It’s not just your bank account either. If someone hacks your eBay account and bids on something under your name, you bought it if they are the high bidder.

Think of all the passwords you have. They are all protecting something.

Even an online forum that you joined could be suspect. Someone disguised as you could leave a comment that could damage your reputation or that of someone else.

There’s no end to the damage that could be wrought. All it takes to prevent it is a clever eight digit code.

So remember, Jusp2bso! (Just use strong passwords to be secure online!)

Arthur Glazer is a freelance writer and computer technician whose column appears biweekly and on gainesvilletimes.com.