Search

Rss Posts

Rss Comments

Login

 

Security

Is your PC secretly connecting to the web?

Sep 23

There is a DOS command that can help you find out if you computer is secretly connection to the web.

  • In START > Run, type cmd
  • Type “netstat -b 5 > activity.txt” and press enter.
  • After say 2 minutes, press Ctrl+C.
  • Type “activity.txt” on the command line to open the log file in notepad (or your default text editor)

This .txt file will have a record of everything that has made an Internet connection in the last couple of minutes; you can then check your task manager to find out where it is and take care of it.

What is SSID?

Jan 12

net-ssid.jpgAssuming you have a network using a router to connect to other computers and the internet, this tip will help you prevent unauthorized use of your network resources, such as internet connection.

What is SSID?
Stands for Service Set IDentifier, it is a code included in all data transmitted over a wireless network, lets say you have two networks, one is called ‘OFFICE’ the other one is called ‘GAMES’, two routers used for two different purposes, how do you prevent the signals from crossing over? Well the SSID allows you to have networks with a unique identifier so devices can communicate with it each other.

read all »

Bluetooth hacked

Jan 03

hacked-bt.gifThis is not new, but a friend called me yesterday concerned about this, here is a small explanation. If your phone has Bluetooth enabled that means it can communicate with other devices through a wireless connection, for example, your Bluetooth headset. Your device has a security feature that allows 2 devices to communicate and secure the connection with a 4-digit number, from 0000 to 9999.

The problem
There is a program that allows an attacker to connect to your cellphone and start guessing the 4-digit number, if it is successful, the program will then lock on to the signal and give the attacker full access to your personal data and take control of your cellphone. All this can happen while your phone shows no activity of any kind.

Using your phone to steal your phone book and other info
This is the most simple attack, someone connects to your phone and copies all your stored information to their system.

bt-steal.gif

Using your phone to connect to the internet.
The attacker can use your phone to connect to the internet and check email or use it for other purposes, if you have email on your phone, the attacker can read and copy all of your emails in a few seconds.

bt-int.jpg

Using your phone to make expensive phone calls.
Some devices allow the software to run while making a call, this can allow an attacker to use your phone to make international calls or even worse, call to a pay-per-minute service setup by the attacker and making a long call without you even noticing, if they charge $5 per minute, a simple 10 minute call can generate a $50 charge on your next bill.

bt-900.jpg

The solution
Well some phones have the ability to select which devices to connect to, therefore an attacker cannot connect. Another solution is turning off Bluetooth if you are not using it or if you don’t have a headset.

By far the best solution is not to use your phone to store personal information such as your SSN#, your bank account number or other info that might put you at risk.

Don’t use Bluetooth?
Not necessarily, the odds of being attacked like this are probably one in a million but it only takes one attack to realize the seriousness of the situation. It is always best not to use these wireless devices to store any information that you might consider important.

Beware of fake system messages

Dec 27

fakead.jpg

Thousands of users per day fall in this trap. Messages that appear to be legitimate and display information about your system, the user clicks on it and it gets infected by a malicious program, most of the time these messages are designed to look like part of your operating system and trick the user into thinking that by clicking on it the fake problem will be eradicated. The problem begins when the user clicks on it.

read all »