Thursday, September 22, 2011

Network Security 101

If you read Wednesday evening's post regarding wardriving and wireless security, i hope you took my suggestions to heart and now have a secure wireless network. But even a secure wireless network doesn't guarantee data security. Even the best passwords can be cracked and wireless networks can be compromised. You need to implement good security on your home and/or office computers as well.

The place to start is with your computers's users. Every computer with any sensitive information should require a user name and password before allowing anyone to access the desktop. True, it doesn't take a lot to get around this first level of security. But it's like locking your front door - a determined crook can kick your door in, but a locked door keeps the casual crook out.

Next, don't keep an unencrypted list of your important passwords on your computer. It's amazing how many times I find clients with a spreadsheet called "passwords" on their desktop of Documents folder. There are plenty of programs like RoboForm and SplashID that allow you to securely keep track of the many passwords we need every day.

Speaking of passwords, another way I see clients jeopardizing their sensitive data is by allowing their browser to remember user names and passwords for banking, credit card and other Web sites that could allow bad guys to steal money, employee or client information and more. Yes, it can be a hassle to remember these logins and to enter them every time you need to access the site. But programs like RoboForm will enter this information for you - and you only need to remember a single password.

The same holds true for accounting programs like QuickBooks. These programs contain detailed information about bank accounts, credit cards and payroll. If these programs are accessed by bad guys they can drain accounts before you know you've been compromised.

The bottom line is to use strong passwords on all programs containing sensitive information. Don't store these passwords where it's easy to find them, and change them from time to time.

Please feel free to call me to discuss successful password strategies. Mention this blog post (or Facebook post) and I'll give you up to a half hour of my time at NO COST.

Wednesday, September 21, 2011

Wardriving and Wireless Security

I just saw a report on KOMO news about three local businesses who were victims of "wardriving.". Wardriving is a fancy term for driving around with a car full of computer equipment searching for unsecured or poorly secured wireless networks. In and of itself wardriving isn't malicious. I know of delivery and service drivers how note and share locations of unsecured WiFi networks so they can check email, surf the Web on breaks, etc. There's no harm done and no one's the wiser. Unless they start downloading/uploading child porn or sending death threats. If someone wants to steal your stuff, though, an unsecured wireless network provides the bad guys with the equivalent of a seat at a computer in your home or office. If that computer is also unsecured, you may find your bank accounts and/or credit cards compromised and personal information stolen. How do you protect yourself? First and foremost you secure your WiFi network. If you're using a consumer-grade wireless router that's more than a couple of years old, buy a new one. Newer routers include easy setup utilities that will give you a decent level of security. Many of these newer routers even offer a separate connection for guests. Some things to consider when setting up your router, though. Don't name your network after your business. This is like leaving the box for your new HDTV in front of your house on trash day. Hackers are more likely to spend time cracking an obvious business network. Give your network an innocuous name or, better yet, hide your network's name (called an SSID). Secondly, use a strong password for people who access your network. Random letters and numbers are they way to go. Hackers have programs that use dictionaries to attempt to decipher passwords. People who regularly connect to your network should only have to enter this password once. And don't be shy about changing this password regularly. A dismissed employee or disgruntled customer with access to your network is a big security risk. Finally, use the most secure level of password protection. For example, WPA is a more secure form of encryption than WEP-128. WEP-128 is more secure than WEP-64. A simple Google search can answer most questions about security levels. Or you can call a trusted IT provider for advice. Check back tomorrow for the sequel to this article: how to keep your data safe if your wireless network is compromised.

Monday, September 19, 2011

So Netflix is finally waking up to the fact customers don't appreciate a significant price hike - like double - as a bolt from the blue.  Sure, it was announced in June that they were going to start charging separate fees for DVD delivery and for streaming.  If consumers wanted to use both services, it was going to go from roughly $8/mo. to about $16/mo.

I get the fact it costs money to provide these services, but that's something these folks should have known from the get-go.  Doubling the price, even with 90 days notice, is crazy.  And customers spoke loudly by bailing on Netflix in droves.  It didn't help that Netflix announced it is losing the Starz library (Disney and Sony movies) in February of 2012.

I admit I have been using Netflix streaming for most of my streaming content on TV, but I'm finding their content is rather limited.  I've enjoyed some of the harder to find stuff, but first-run movies and top-tier content is lacking, in my opinion.

So Netflix CEO Reed Hastings announces the DVD service will spin off into a new company called Qwixter.  He's pretty blunt about the fact the new pricing will stand.  But the did apologize for not doing a better job of announcing it.  That doesn't improve my opinion of this move one whit.  I'll keep my streaming for now, will dump my DVD plan.  We'll see what happens.

I'll be using my iPad to stream content from Hulu+ and other sources, though.  If Netflix doesn't pony up with highly improved streaming service it will be time for a change.  It will be interesting to see what happens between now and the end of the year...

What is your streaming pleasure?