Wireless Security UPDATE: Reaver

A New Program Thwarts Wireless Security: UPDATE

In December we posted this article, reposted here so to jog your memory:

Having wireless internet access is awesome, especially with how many devices these days use the technology. And with proper network security, we can be sure that al our data is safe from intrusion…as long as we don’t make any silly mistakes, right? Well, that would be nice. However, there is a new piece of software in distribution that makes it easy for anyone with the know-how to crack into your wireless network. It’s called “Reaver” and it’s available to anyone online. Now don’t worry too much just yet – most people using it are just going to use it to try and get free internet access where they’re not supposed to have it. But this can cause slowdowns on your network or, if you have sensitive files, can be a possible bigger problem.

Reaver works by exploiting a flaw in your wireless router. The flaw was originally designed simply to make setup easier for the end user – you. However, it can be exploited by someone using this tool to gain your wireless password, which gives them access to your internet just like another one of your computers. You might not even be able to tell. This flaw is called WPS, and even if you turn the feature off, the program can still use it when you can’t.

So how do you protect against these attacks? Well here’s the worst part of all this (I promise it’s the worst part.) You can’t…yet. Stay tuned in the future for updates, as there will no doubt be some new solution, but for now there’s just one piece of advice that can never be repeated too much:

Use a secure password. The way the program works makes it harder to determine your password the more complicated it is. As we’ve written about in previous articles, there’s an easy way to come up with a secure password: use a phrase that has significance to you but to no one else. For instance: andreacollectspetrocks. This way you’ll have a password that will take so long for the computer to guess that it will eventually give up. Stay current on updates if you’re concerned further about this issue!

Since this article was posted, however, there's been some developments. The fundamental flaw in the router is still there, but it can be helped. Download DD-WRT for your router from http://dd-wrt.com/site/support/router-database and install it. DD-WRT is a piece of 'firmware,' software which runs on your router's hardware. But be careful: you'll have to be relatively tech-savvy to install it and set it up. If not however, our computer repair techs at Nerds On Call would be happy to help you set it up. Keep posted for further updates and stay safe!

 

 

 

Boost WiFi at Home, Part 2

Boost WiFi at Your Home, Part 2

After last week’s article about how to boost your WiFi network, I’m sure you headed straight out to buy a Wireless-N, dual-band router and removed all the cement or brick walls in your home or office to allow for optimal placement and signal transmission, right? No? Never fear.  While an up-to-date router is an integral part of a stable, strong WiFi network, there are even more ways to improve your home or office network that don’t require a sledge hammer or building permit.

First, a quick recap of last week’s tips one through three: upgrade to Wireless-N, eliminate signal interference from other networks or electronics in the area, and install your router in a central, high location for a clear, unobstructed signal.

Step four: kick out piggy-backers.

If someone is using your network without your knowledge it'll definitely slow things down.  WiFi networks are easier to hack than you may think, even if you've set up a WPA security key (i.e. password) on your network.  If you don’t have a password on your network, for the love of Star Wars please go do that now.  Login to your router, turn on WPA encryption and set a password.  You’ll need to also update all of the computers and devices on your network so that they provide the password when connecting.

Unfortunately, there are free programs that allow anyone to hack your network’s password, giving unscrupulous WiFi leeches access to your network.


If you think you may be the victim of a network hacker, check out the free network monitoring software offered by Zamzom.com (http://www.zamzom.com/).  Follow the tutorial video to see how the program identifies all the computers and devices accessing your WiFi network.  Use the tutorial’s tips to lock down your network or contact a trusted networking professional to help you determine if a router firmware program or stronger hardware firewall may help.

Step five: prioritize your programs.

It’s very common for network speed to slow when experiencing heavy traffic.  If your WiFi network experiences a rush-hour clog when everyone in the house is online (downloading videos, streaming media, playing online games, etc), your router’s “Quality of Service” (QoS) settings may be able to help direct traffic.

Use QoS to set rules that your router will follow to prioritize the programs and functions you need (like surfing the net) over those that may be hogging your bandwidth unnecessarily (like the kids playing online games when they should be doing homework).  Or you can elect to prioritize certain devices (like your computer) over others (like the Xbox).

Unfortunately, not all routers support QoS, so you'll have to check your user manual or make sure to purchase one that does if you're buying new.  For a detailed walkthrough, check-out Lifehacker’s article “Ensure a Fast Internet Connection When You Need It” (http://lifehacker.com/326543/ensure-a-fast-internet-connection-when-you-need-it).

Step six: extend your router’s range with a repeater or DIY tweaks.

For less than $30, you can add a stronger receiver to your computer or laptop, allowing the system that’s always had trouble connecting due to distance from the router, obstacles or poor receptiveness to miraculously get online.  The Rosewill RNX-N180UBE USB External Antenna Wireless Adapter (www.rosewill.com/products/1721/ProductDetail_Overview.htm, Amazon, $23) plugs into your computer or laptop’s USB slot.  The antenna increases the receiving strength of your computer.

If you’re short on funds, you can explore your inner Nerd with a DIY antennae made with aluminum foil, a file folder, some glue and scissors.  Just search YouTube for "WindSurfer Antenna" for a video tutorial.  Some users swear they’ve seen as much as an 82% increase in their wireless strength, but your mileage may vary.   But for the bargain price of free, there’s nothing to lose.

Companies Announce Streaming Television Options

Future of Television:  Pay-Per-View – Personalized Streaming Television

Since the advent of streaming video, consumers have been presented with a few options: either they can watch a limited number of shows for free on the internet, pay for video rentals of TV shows after they’ve aired, or pay for an expensive cable/satellite bill that includes the cost of hundreds of shows they’ve never watched nor will care to watch.

One of the lead telecom providers in the US plans to change that. The Wall Street Journal announced recently that Verizon is planning on offering a pay-per-view TV subscription service. The model would allow subscribers to only pay for the television shows that they actually watch, with more popular shows  being offered at a lower rate and more obscure shows costing a bit more. Currently the company is in talks with smaller media companies, according to the WSJ, as the content delivery program would require cooperation across a number of networks.


This sort of customization has only recently become available through the content delivery options that the evolving web has produced in recent years. The telecom giant has already started to merge its TV and internet services with its fiber optic, or FiOS network. Fiber optics allow for not only much more data to pass through to the consumer, but to do so at much faster speeds than traditional copper data lines. The FiOS service includes internet, telephone, and television access, and this combined approach would make it much easier for the company to implement a “metered” usage system such as the one announced.

A similar system is also being developed by Intel, but this project could threaten to “kill the cable industry as we know it,” according to Forbes. But that’s not inherently a bad thing. The service would run through the internet and only charge for the watched shows. In addition to this, it would act as a “Cloud DVR,” allowing users to watch any past TV show without having recorded it, as well as have control over the broadcast, such as pausing and rewinding live TV.

Intel made this decision after GoogleTV and AppleTV failed to spark interest in their microprocessors, judging that they would be able to revolutionize the industry by themselves. The program ships out to selected members this month, and will be tweaked and refined until it is available to all consumers.

Whether or not either of these technologies takes off, it is clear that the consumers have spoken; they want their TV when they want it and they don’t want to pay for anything but their content. The ball is now in the corporation’s court, and these few offerings are the signs of their return volleys. Stay tuned for the future of television!

Been Hacked? Here's What to Do

So You Think You’ve Been Hacked – What to do next

Headlines have been shouting out, that the FBI recently investigated a website which had obtained personal information of high-profile people, and posted it online. Their credit card and social security numbers were available for anyone to see. These numbers have been conned out of the victims, through various methods of hacking.

Now it's unlikely that anyone would want to target you specifically in order to take your information, but hackers have special tools that allow them to mine the information of hundreds or thousands of people and computers at the same time, exploiting any holes that they find.

In previous articles, I've covered a lot on how to protect yourself from spyware, malware, and hackers. But preventative measures don't always do the trick, or sometimes you learn about them too late. So what are you to do when you think your account has been hacked, or someone is stealing your information?


First Step: Call your bank or credit agencies. If you are able to access your finances online, chances are that a hacker can too. Banks can review and stop any suspicious activity on your account. It would also help to get a credit report to check if any accounts have been opened in your name. If you're only suspicious, you can set up a fraud alert at an agency like Experian, Equifax, or Transunion. For three months, they will make sure that any creditor must contact you by phone whenever someone requests credit in your name.

Second Step:  As always, scan and update your computer, while this may not fix what has been hacked, it should help to close those vulnerabilities that allowed them in. Use Malwarebytes and Microsoft Security Essentials to check for viruses. Update your flash, Java, and PDF plugins as well.

Third Step:  Change your passwords. If you suspect that anyone but you has access to any of your online accounts, simply change your password. The quicker you do this, the less opportunity the hacker has to actually inflict damage. While you really shouldn't use the same password for every site, many people still do. My personal strategy is to pick a few memorable passwords and then create variants for different sites. Instead of making them more complex like many people recommend, consider simply making them longer, with more personal meaning for you. A computer is more likely to guess Hunt3r2 than it is Ilovebakedbeansuccotash.

Finally… if in doubt call a pro – like your local computer repair expert if your problem is more complicated than you can handle.  These are good steps to get you started. There are dozens of types of attacks, and the only way to truly combat each one is to talk to an expert in the field. So make sure to get all the information before proceeding to fix the problem.

 

Tired of Spotty Reception? Boost WiFi at Home

Boost Wifi Reception at Home with These Tips

Wi-Fi makes connecting to the Internet seem like magic.  There's a wonderful signal passing through the air that makes my phone work faster and unplugs my laptop from the cable - miraculous!  If you're affected by slow speed or bad reception, however, staying connected can be a drag.  Try these tricks to improve your home or office WiFi.

Step one: consider your hardware. 

If your router is even a few years old, it may be time to upgrade.  A router that’s slow or incapable of transmitting a lot of data at once will compromise your whole network.

Anyone using an older generation of wireless router (designated as Wireless-A, -B, or –G) should consider upgrading to a Wireless-N router, especially if you have multiple systems connecting simultaneously, stream HD video to your computer or TV, or play online games.  Wireless-N supports a larger bandwidth, meaning your network can process more data simultaneously.  It won’t get bogged down as quickly by multiple devices getting online at the same time or accessing a large file.


While Wireless-N routers are backward-compatible, the best performance improvement requires that your device support a Wireless-N connection as well.  This may require that you upgrade the WiFi access card in a desktop or laptop.

Step two: eliminate interference.

If you have neighbors with WiFi networks in close enough proximity, it can interfere with your network’s stability.  There are a number of channels routers can operate on and if you're using the same channel or one too "close" to your neighbor it will degrade your signal.  WiFi Stumbler (www.meraki.com/products/wireless/wifi-stumbler, free) is a network locator application that provides a graph of the channels available to you.  Choose a channel with the most space around it as possible.  It's OK to pick up some competing signals near you so long as they're weaker than yours.  Don't choose a channel with a strong competing signal - pick a one that keeps its distance from other signals.

If you have a lot of electronics in or around your home, you may also benefit from a "dual band" router.  Single band routers operate on the 2.4 GHz band, a relatively crowded signal interface used by many wireless phones, microwaves, baby monitors, and many more common electronics.  A dual band router operates on both the standard 2.4Ghz radio and less crowded 5Ghz radio, offering a signal that’s less prone to interference.  If you can’t upgrade to a dual-band router, move your router as far from conflicting appliances as possible.

Step three: location, location, location.

WiFi transmission can be blocked or weakened by obstructions between the router and the device. Don’t hide it away in a cabinet - position your router centrally, without too many thick walls to block its signal.  Point antennas vertically and elevate it if possible.  WiFi signals travel best down and sideways, so placing your router in the attic or a on a high shelf may give your signal a little boost.  One caveat: if it drops signal often or requires frequent resets, make sure your router is easily accessible.

Stay tuned next week for more ways to improve the strength and reliability of your WiFi network.

 

Avoid Social Media Scams with These Tips

Stay Safe by Avoiding Social Media Scams

From identity theft to fake contests to "send me money" scams, Facebook and Twitter are host to all manner of Internet criminals looking to swindle unsuspecting users out of money or information.  Don't fall victim!  Here's how to identify and avoid the most common social media ploys.

Tug at your heartstrings. Most people want to help someone in need, and criminals are on the lookout for any way to exploit this.  Within hours of the Newtown Connecticut shooting, "victims" pages popped up everywhere.  Some of these were created by scammers asking for donations.  Another common ploy is to hack into your friend's account, then send you a private message asking for money, claiming to be traveling abroad and stranded.  The easiest way to avoid this one is to contact family members to verify they really are traveling before even thinking of sending money.


The lure of "free stuff."  Whether it's a Starbucks Gift Card or an offer from Cheesecake Factory that tempts you to click, resist the urge.  This scam is a phishing attempt wherein the culprit tries to get hold of your personal and/or financial data in order to sell it or use it to perform identity theft, credit card fraud, etc.  You'll be prompted to fill out a survey, likely with personal information, which will in turn be used to harass or spam you outside of Facebook or Twitter.  You'll also spam all your friends with messages about the fake offer.  When in doubt, never give a 3^rd party Facebook application access to your personal information.  If you suspect you may have done so accidentally, visit your Account Settings page, click on Apps and remove anything you don't recognize, trust and want to have access to your personal data.

"Improve" your Facebook experience. Come on, you know you wanted to add that "dislike" button.  How about changing the color of your Facebook profile?  Both of these lures will have you filling out surveys with personal information and spamming all your contacts to do the same.

Curiosity killed your account.  You receive a Direct Message with an alluring question: "Is this YOU in this video?"  Click on the link and you're prompted to download an update to your Flash player that is really malware.  Hidden code within causes a Facebook "like" to appear on your timeline, encouraging your friends and family to click and become victims as well.  Both Twitter and Facebook were hit hard with these malware attacks last year.    Another popular one offers to let you "see who has viewed your profile." It’s just another ploy to gain access to your personal information through surveys and malicious applications.

They offer you easy money, for a fee.  Whether it's a promise to make thousands of dollars working from home, or the offer of a dream job as a Mystery Shopper, any "job" that requires you to pay up front is most definitely a scam.  Be suspicious of anything that sounds too good to be true.

Word to the wise: always check where a link is directing you before you click.  Hover your cursor over the link without clicking it - the website will display in the lower left-hand corner of your screen.  I once received an email telling me my account was going to be shut down because it had been hacked.  The email contained a link I was to "click on to verify my identity."  My warning bells rang.  Instead of clicking the link, I contacted customer service, and I was glad I did.  There was absolutely nothing wrong with my account.  If you're ever prompted to "confirm your email account," or "verify your password" following a link you received in a private message or an email, don't do it.  Go directly to the website and log in from there.

There are resources at your disposal if you suspect a fraud.  Snopes (www.snopes.com) tracks Internet scams, rumors and misinformation.  Arm yourself with info about the latest scams through the Better Business Bureau: go to http://www.bbb.org/scamstopper.  Facebook itself has a "scams" page in their help section.  They provide tons of information about making your account more secure so you're protected in the future.

 

 

 

Options for Computers for Seniors in Your Life

Computers for Seniors

When you think “cutting edge technology,” you probably don’t think “senior citizens,” but recent advances in technology are aimed at making life easier for grandma and grandpa, as well as those that care for them.  These devices make it possible for the less tech-savvy to stay connected to friends and family and for remote caregivers to monitor health and wellness.

Associate Professor of Psychology T.J. McCallum, Ph.D., of Case Western Reserve University conducted a three-month study wherein he found that seniors that used technology had higher self-esteem and greater social interaction than those that did not use technology.  Social media, email, online gaming and video chat offer a great way to connect with friends and family or find support among the many interest groups hosted online.  Yet many seniors are unfamiliar with computers and/or have difficulty navigating the Internet, and the learning curve for new technology can be steep.


The drawbacks are that it’s pricey for the specifications: 2 GB of RAM is pretty paltry and a 1.8GHz processor won’t be winning any speed tests.  It’s not meant to be upgraded, though on the bright side that means that you won’t be installing additional programs to use up the few available resources.  In order to remain simple the software is locked down.  Grandma won’t be using Gmail or hotmail, but instead the Telekin supplied email.  One user pointed out that it’s only available in English, but frankly I’d welcome never getting a panicked call that the computer is suddenly only “speaking” German.

Advances in home monitoring have allowed many seniors to extend the time they can remain at home, while offering remote caregivers peace of mind.  The GrandCare System (www.grandcare.com) uses a dedicated Internet connection and wireless sensors throughout the house to allow designated caregivers to send communication to their loved one, view activity and monitor their health and wellness as they go about their daily life at home.  Sensors track certain kinds of movement, such as if there’s an unusual amount of activity at night, if the medicine cabinet fails to open at the right time, or if the refrigerator is unused for an extended period of time. If grandpa, for example, forgets to take his pills, doesn’t get up at the usual time, or opens the door at an odd hour, a caregiver alert will be sent via text, email or phone.

The GrandCare System also integrates into a touch screen computer hub that’s designed to be simple and easy to use.  Friends and family can send pictures, messages, keep a calendar up to date with appointments or send videos that are viewed with one touch.  Easy access to Skype (for two-way video chat), Facebook and YouTube allows seniors to stay connected.  The system runs about $500 for installation and $100 in monthly fees for a one-bedroom apartment.

Even seniors that don’t yet need extensive monitoring can benefit from systems that will support the add-on of such services at a later date.  Lowe’s IRIS (www.lowes.com/iris) Smart Home technology is expandable.  Today you can use the home security and programmable lighting and climate management; when you need them, additional sensors can be integrated into the system to monitor activity and send alerts to loved ones if something strays from the norm (like if the lights don’t turn on at the regular time or the refrigerator doesn’t open).  The system also supports an emergency alert pendant.

There are a variety of standalone devices that can allow remote monitoring of senior’s health.  From medication management systems that will dispense medication at programmed times and doses, to remote health monitoring systems that allow doctors to track vitals over the Internet, technology is really a senior’s best friend.  If you or a loved one is struggling to find a solution to an elder-care issue I haven’t mentioned, send me an email.  There are many other products that may be able to help.