Friday, January 30, 2015

Find Free Images to Use

Copyright can make working with online images a hassle.  When you find an image you want to use, you have to locate the source (difficult), get permission to use it (more difficult), and then properly attribute the source.  If you have an image you really want, you can contact the person who created it and ask for permission to use it.  (Unless you are a non-profit, it is helpful if you express willing to pay a small amount to use it.)  You could also try to claim fair use (a copyright exception for using small amounts of a work for educational purposes), but the laws surrounding fair use are so complex that it can be difficult to ever be certain that your use would qualify if brought into question.

Instead of going to all that work just to use one image, consider using images licensed under the Creative Commons.  These are images that the user of the work has granted permission to use under specific circumstances.  Some allow for commercial or non-commercial use, and some permit modifications while others do not allow for any changes.  You will still need to credit the owner of the work, but you know that you can use them if you stay within the permissions of the license.

One great place to start is the Wikimedia Commons.  This site allows you to search for images and easily view the permissions granted by the owner.  The license will appear as something like "CC BY-ND".  If you are not familiar with the Creative Commons licenses, the types of available licenses are listed at the end of this page.  You can also do an image search on Google, Yahoo, or Bing.  All three have options to filter with results that you can reuse, but be sure to confirm the image is labelled correctly by going to the site where it was posted.

Thursday, January 29, 2015

Improve the Functionality of Your Taskbar

The taskbar (the small strip at the bottom of your screen that contains the start menu button, clock, and other options) has been around since Windows 95.  However, recent versions of Windows have made the taskbar extremely useful.  If you have Windows 7, 8, or 8.1, here are some ways you can configure the taskbar to help you.

Pin It - Are there programs that you regularly use?  For me, those programs are Chrome, Excel, Access, Quicken, Calculator, and VirtualBox.  Instead of searching through the start menu or start screen each time you need to open it, you can pin the icon to the taskbar.  Open the program, then right-click the program's icon and select "Pin this program to taskbar".  If you change your mind, you can unpin it by right-clicking it at any time and choosing "Unpin this program from taskbar."  If you want to reorder the pinned icons, click and hold an icon and then drag it where you want it to go.

Load Pins Quicker - Instead of clicking on your pinned icons in the taskbar, you can load them even quicker with a key combination.  Hold down the Windows key and then hit the number that represents the icon's order in the taskbar.  (Windows + 1 opens the first program, Windows + 2 opens the second program, etc.)  If the program is not running, it will open a new window.  If the program is already running, it will load the program's window.  If you want to open a new window for that program (like a second browser window), add the Shift key to the combination.

Use Jumplists - If you right-click on a program's icon in the taskbar, you can access its jumplist.  The features of a program's jumplist can be customized by the program's developer, so each one will be different, but they usually contain a list of useful features or recent programs.  For example, Chrome's jumplist contains your most visited sites, recently closed tabs, and a few common program options.  The jumplist for Thunderbird (an email reader) gives the options "Write a new message" or "Open address book".  If a program doesn't have a built-in jumplist, you will only see the options to run the program or pin/unpin it.

Don't Combine - Starting with Windows 7, the taskbar began combining multiple windows from the same program under one icon.  You can still switch back and forth between them, but you must first hover over the program icon to display a list of the open windows.  If you primarily use multiple windows from one program (for example, you usually only have several windows of your browser open), you can tell the taskbar not to combine them.  Right-click in open space and select "Properties".  Towards the middle of the screen, you will see the "Taskbar buttons" option.  Change the menu to "Never combine", and you will get a separate icon for each window.

Move It or Hide It - By default, the taskbar is at the bottom of the screen, but it doesn't have to stay there.  If you want to move it to another edge, click on it and drag it to that edge.  (If it doesn't move, you may need to right-click in empty space and uncheck "Lock the taskbar".)  You can also hide the taskbar to give your screen more space.  To do this, right click in empty space, select "Properties", and then check "Auto-hide the taskbar".  Now, the taskbar will only appear when you move your cursor to the bottom (or the edge where you moved the taskbar).

Add Toolbars - Usually, the thought of toolbars brings memories of unwanted toolbars installed in your internet browser when you load other software.  However, these toolbars are created by Windows and are much more useful.  To see the available toolbars, right-click in empty space and then hover over "Toolbars".

My favorite toolbar is the "Address" toolbar, which adds a box to the taskbar for entering internet addresses and performing searches.  (Searches and addresses will open in your default browser, and searches will be conducted by the default search provider in Internet Explorer, not your default browser.  To change your search provider, open Internet Explorer, click on the gear icon, select "Manage Add-Ons", select "Search Providers", and then select the search provider you want to use or select "Find more search providers..." at the bottom.  When you have the provider you want on the screen, select it and choose "Set as Default" at the bottom.)

Other toolbars include a quick access to your bookmarked links, your desktop, and a keyboard.  You can also create your own toolbar to quickly access any folder.

Wednesday, January 28, 2015

Should You Use MAC Address Filtering?

A reader wrote to me last week, saying that someone told him that he could use filtering to block any unauthorized devices from accessing his Wi-Fi.  He wanted to know if this was a good security feature.

First, an explanation of what he is talking about.  Each device that connects to any type of network (wired, wireless, cellular, etc.) has a unique 12-character code, called a MAC address, to identify it on the network.  If you enter your router's settings, you can either block devices with a specific MAC address from accessing your network, or you can create a list of allowed MAC addresses and block any others.  On the surface, it sounds like a great idea.  Enter the MAC address of every device you own, block all others, and no one else can ever use your Wi-Fi.

Unfortunately, this is not an effective security measure.  MAC addresses can easily be spoofed by a computer, and they are broadcast by your router every time it sends a packet of internet data.  All an attacker would need to do would be to capture one packet from your router, read the MAC address of the device, and then use a tool to pretend to be that MAC address.  Within a minute, someone could be on your network if your only security feature is MAC filtering, and it could take only a few seconds if someone wrote a few lines of code to automate the process.

Furthermore, the process of administering the list of approved devices will take some time.  Any time someone wants to legitimately connect a new device, you will have to go into the control panel and enter it in the list of approved addresses.  If you have family or friends over for dinner, they will be unable to connect to the Wi-Fi with their phones, tablets, or laptops until you have entered their MAC address on the approved list, something that is sure to annoy everyone there.

WPA2 encryption is still the best form of Wi-Fi security.  Using MAC filtering is like adding a padlock to your automatic garage door.  Anyone who can figure out the right code and frequency for your garage door is going to be undeterred by also having to cut a padlock.  But, the process of getting out of your car and unlocking the padlock before opening the garage door is going to annoy everyone real quick.

MAC filtering does have legitimate purposes, especially in work environments.  For home use, it can be used to block access if someone is using it without your permission or to block your kids from the Wi-Fi as a form of grounding.  Yes, it is certainly still possible to break, but your kids or a casual Wi-Fi thief probably aren't going to know how to do it.

Tuesday, January 27, 2015

Protect Your Credit Card Online

Lately, it seems as if we hear about a new data breach almost every week.  The biggest threat to individuals in the online security world is no longer the virus or trojan that gets on your computer (not that they don't exist); instead, it is the threat of your personal information being stolen from someone else's systems.  Because it can be used to charge purchases worth thousands of dollars before you notice, your credit card number is a hot item to steal.  While you can't protect your information once you have handed it over to an online merchant, there are still steps you can take to make sure your credit card number remains secure online.

1) Only Enter Your Information on Secure Sites - Any information your computer sends on the internet can be intercepted and read by another computer.  That information includes the credit card number you sent to Amazon and the social security number on the tax return you e-filed.  To prevent criminals from obtaining this information, we use encryption to modify the data so that only you and the recipient can read what it actually says.  Anyone else only sees a long string of characters that makes no sense to them unless they are able to crack the encryption key.

To know if you are sending information securely, you should always check the first few letters of the internet address.  If you are sending personal information, it should always say "https".  If it says "http", do not give them your data:  the information will not be encrypted.  (There are other options that could appear here, but they are rare except in certain circumstances.)  There may also be a lock somewhere on the page, depending on the browser you are using, but the "https" will be there in any browser.

2) Don't Save Your Card - Simple statistics would dictate that the fewer places you store your information, the less likely it is to be stolen by someone else.  So why store your credit card on a site where a simple password crack can get to it?  Yes, it is more convenient to keep your information there so one click can make a purchase, so you must decide whether you want to trade security for convenience.  If you do choose convenience, make sure your account is secured with a complex, unique password to prevent access to your account.

3) Check Card Readers - Thieves are becoming more sophisticated in the way they go for your credit card numbers.  For a small amount of money, they can get a device to attach to an ATM or gas pump card reader.  (Theoretically, they could develop one to work at a grocery store, but they would need to install it without being caught, and it is more likely to be noticed.)  Before you swipe your card, give the card reader a firm tug.  If something comes off or feels loose, the card reader could have been compromised with a phony reader.  Also, check around for anything that could be recording you as you enter your PIN, and use your other hand to cover the keypad as you enter it.

4) Use Masked Card Numbers, PayPal, or a Similar Service - Some credit card companies are offering online card numbers for one-time use.  You simply log in to your account, request a number, and then copy and paste it onto the site for payment.  Once the company sees your purchase, the number is cancelled, and any future purchases with that number are automatically declined.  You can then request a new number for your next purchase.  If you use Blur to block sites from tracking you online, you can also get this feature by upgrading to the Premium version.

If you don't have access to masked card numbers, you can use PayPal to pay at a variety of online stores.  By using PayPal, stores do not get your credit card number.  Yes, it is possible that your card could be stolen from PayPal's site, but using PayPal in multiple places keeps your card number in only one place.  Once again, the fewer places that have your credit card number, the less likely you are to have your card compromised.

Monday, January 26, 2015

Free Space on Your Hard Drive

It's a horrible feeling when you realize that you are running out of space on your hard drive.  Yes, you can purchase a bigger drive, but if you don't want to spend time and money getting it set up,  you might wonder if there is anything else you can do to free up space on your drive.  Fortunately, there are a few free utilities that can help you!

1) Uninstall Programs - Windows has a built-in utility that will uninstall programs you no longer need.  Go to "Control Panel" on the Start menu (In Windows 8/8.1, the Control Panel can be found on the Charms bar under "Settings".)  If you are in Category View, look for "Uninstall a Program" at the bottom of the left column.  In Icon View, search for "Programs and Features".  You will now see a list of all the programs that have been installed.  Look through the list to see if there are any you installed that you no longer need, and uninstall them.  Do NOT just uninstall any program you do not recognize!  Some programs in this list are important for the operation of your computer.

2) Scan for Junk - Your computer produces a lot of files on a daily basis that you don't need to keep.  In most cases, it is programmed to delete these files as soon as it is finished with them.  However, occasionally a bug or an improper shutdown will cause these files to remain on your computer after they are no longer needed.  Fortunately, CCleaner can help you locate and remove these files.  Download and install the free program, select or unselect the items you want it to scan for, and then select "Analyze".  CCleaner will scan for these files and display a report.  Then, click "Run Cleaner" to delete these files from your computer.

3) Scan for Duplicates - Do you have duplicate copies of photos, music, videos, or other files on your hard drive?  With all the files on your hard drive, how would you even know if you did?  Duplicate Cleaner takes the guesswork out of locating duplicate files.  It will scan your drive and locate duplicates for you.  While this program will locate duplicates, do not simply trust Duplicate Cleaner's judgment on duplicate files.  When I scanned my drive, it flagged a couple sets of files that were not actually duplicates.  Look through the list and make sure before you start deleting files.

4) Locate Large Files - Do you know what file is taking up the most space on your drive?  WinDirStat can show you.  This program will analyze your drive and then show you which folders are taking up the most space.  If there are subfolders, you can expand them to locate where the big files are.  You can also click where it says "Size" to sort the folders and subfolders by size.


Friday, January 23, 2015

What Is a Security Certificate?

When you send information over the Internet (or another computer sends information to you), it travels through multiple computers and other devices before it reaches its destination.  While each device should only pass the data along to its destination, it is possible for a compromised or rogue device to capture and store everything that it passes along.  Normally, you wouldn't care if a device captured data:  it is available on the internet anyway.  However, if you just entered your credit card information, you probably don't want that being picked up by a computer anywhere along the way.

Fortunately, we have encryption methods available so that someone who captures the data we send can't read the actual data.  A security certificate is part of the process for securely transmitting data across the internet.  The certificate proves that you are connecting to a legitimate site.  For example, when you attempt to connect securely to Amazon.com, Amazon presents its certificate to prove that it is the real Amazon site and not a fake site that could be trying to steal your data.

The security certificate process usually occurs in the background without our knowledge.  Certificates are issued to sites by certificate authorities (who issue certificates among themselves to verify their own identities), and then when you attempt to securely connect to a site, the site shows its certificate.  When everything is working fine, you never know what is taking place behind the scenes.

However, if there is a problem with a security certificate, you will see a warning message.  There are many reasons why you might see this message.  The site may have configured its certificate incorrectly.  The certificate could have expired and not been renewed by the website (this might happen to smaller sites, but is highly unlikely for a large company).  Or, someone along the way could be pretending to be a legitimate site.  The site may present a security certificate, but it may not be from a legitimate, recognized certificate authority.  Instead, the certificate may be from a shady "authority" or even issued by itself.

Unless you are a webmaster or IT person, you really don't need to understand the details of how security certificates work.  Just remember:  if you see a warning saying that a site's certificate is not trusted, do not go to the site.  If you do choose to proceed, then be very careful about the information you give the site.  There is no order you need to place that can't wait until a site gets its security in order!

One final note:  I have encountered several situations where a certificate warning is issued because the computer's date is set wrong.  The computer reads the certificate's issue and expiration dates and sees a problem because it thinks the certificate is too old or was issued on a date that hasn't happened yet.  If you are getting certificate error messages all the time, check your date and time settings.