Yesterday, we discussed methods to keep track of all your passwords. However, there is no point in trying to store your passwords securely if they can be easily cracked by software. It would be wonderful if we could create a simple, four-letter password to get into all of our accounts. Unfortunately, this is definitely not secure.
Password-cracking software is designed to break passwords by trying all possible options. If your password is only six lower-case letters, it can be cracked in less than a second. Even adding capital letters, a number, and a symbol only takes the total for a six-character password to 52 seconds. An eight-character password (with all of the above items) would take only 3 days to crack. It is critical that you use a long password. So that you don't have to constantly make your passwords longer, I recommend using at least 12 characters.
But this leads us to how you can remember your password. Obviously, you can use a password manager or a notebook to store them, as long as you keep them secure. But there are some easier ways to remember your password.
One possible way is to think of a sentence. For example, I might choose: "The Chicago Bears won the Super Bowl in 1985, the same year I was born!" Then, I can take the first letter of each word to make my password: "TCBwtSBi1985,tsyIwb!" That's a 20 character password! Even if I need to write down the password, I can write down the sentence as a reminder without needing to actually give up my password.
You can also use a similar method. Instead of the sentence, I could just use a few words of it: "Chicago Bears Super Bowl 1985!" and take the first three letters of each word to create: "ChiBeaSupBow1985!" That's 17 characters!
A less secure method would be to use symbols to replace letters in a sentence. For example, "I love to watch soccer!" could become "Il0vet0w@tch$occ3r!" You could also misspell words, creating something like, "Iluvt0w@atch$ock3r!". These passwords are not as secure as the ones earlier, but they will still be difficult to crack.
One final method is to use the same root word or words for a password, and then add modifiers to it. For example, I might choose to use my name and the names of my parents: "JimYvonneSteve". Then, I can make unique changes to it for each website. "J!mYv0nneSt3ve", "!jImyV0nnesTeve", or even "Jim!22Yvonne!22Steve!" This method also helps you if you need to write down your passwords: you can write down clues to help you remember the modifications, but only you know the root password.
As a final note, password crackers are optimized to do what most of us will do when forced to create complex passwords. They will usually check the top passwords first, then they will start to use words, and then start adding an uppercase first letter, a 1 or 2 placed after the word, and a symbol at the end or used to replace a letter. Enough passwords collected from password dumps follow these guidelines.
Wednesday, November 5, 2014
Tuesday, November 4, 2014
Keeping Your Passwords Safe and Accessible
Passwords are a necessary evil. On one hand, we have to have them to keep our information secure. However, on the other hand, we also have to remember them all so that we can keep access to our information. This situation is what prompted one of my readers to email me last week asking about the best way to keep track of passwords.
Of course, it would be wonderful if we could use the same password for everything. Unfortunately, that is no longer a secure option. With the large number of hacks that have occurred in recent months, we can be assured that a password to one of our accounts has probably been compromised somewhere. If that password is the same for everything, knowing your email (probably accessible from inside your hacked account options even if it wasn't hacked itself) will give others access to any accounts using that same password.
I certainly wish I could write a "best-in-all-cases" option for keeping track of your passwords securely. Unfortunately, there is no best option. The key is to find something that works for you.
One option is to use a password management program. These programs will keep track of all your passwords, and many will automatically insert them in the proper places. Some will even generate random passwords for you. These passwords will be secure because they not only use all the general password-selection criteria (lower-case and upper-case letters, numbers, symbols, etc.), but also because you will not remember the random passwords they generate. This prevents you from accidentally giving your password out to a phishing site that you think is legitimate.
However, there are some problems with password managers. If a password manager is installed on your computer, you are unable to sync it with your phone, tablet, or other devices. You will need to install a separate program on each device and then update passwords on all of them when they are changed. An online password manager stores your passwords on a server so that they sync between all your devices. Unfortunately, this is my least-recommended method because it can be hacked to expose all your passwords.
If you don't want to use a password manager, you can consider using a notebook to keep track of your passwords. (Before writing down login information for work in a notebook, check with your company's IT department. Many have prohibitions against writing down passwords.) This works great if you primarily access the internet from home on one device. However, if your computer travels or you use many different devices, this becomes a problem. Your notebook could be lost, exposing your passwords, or you could leave the notebook at home and not have any way to access your information.
If you do use a notebook, do not write your user names along with your passwords. If your notebook is stolen, someone will have quick access to your accounts if both are written down. You can also write down your user name along with some generic hints that remind you about your password. This way, you will know your password by reading it, but others will be unable to decipher your password from the information.
If you are wondering what I use, the only simple answer is: "All of the above". There are many accounts that I only access from my primary computer. I use a password manager installed on my computer to provide me quick access and secure passwords for these accounts. For my most-used accounts (email, Facebook, bank, etc.), I simply remember the passwords. And I store user names and hints for all of my passwords in a password-protected file that I store in my Dropbox account, making it accessible on all my devices.
Obviously, my solution is not going to work for everyone. Some people will find that a notebook in a desk drawer will work fine. Some will be willing to take the risk to have the convenience of an online password manager. Others might opt for a hybrid solution like me. Whatever method you choose, be willing to accept the risks and inconveniences that will come with your method, and don't be afraid to try out different methods until you find the one that works best for you.
Of course, it would be wonderful if we could use the same password for everything. Unfortunately, that is no longer a secure option. With the large number of hacks that have occurred in recent months, we can be assured that a password to one of our accounts has probably been compromised somewhere. If that password is the same for everything, knowing your email (probably accessible from inside your hacked account options even if it wasn't hacked itself) will give others access to any accounts using that same password.
I certainly wish I could write a "best-in-all-cases" option for keeping track of your passwords securely. Unfortunately, there is no best option. The key is to find something that works for you.
One option is to use a password management program. These programs will keep track of all your passwords, and many will automatically insert them in the proper places. Some will even generate random passwords for you. These passwords will be secure because they not only use all the general password-selection criteria (lower-case and upper-case letters, numbers, symbols, etc.), but also because you will not remember the random passwords they generate. This prevents you from accidentally giving your password out to a phishing site that you think is legitimate.
However, there are some problems with password managers. If a password manager is installed on your computer, you are unable to sync it with your phone, tablet, or other devices. You will need to install a separate program on each device and then update passwords on all of them when they are changed. An online password manager stores your passwords on a server so that they sync between all your devices. Unfortunately, this is my least-recommended method because it can be hacked to expose all your passwords.
If you don't want to use a password manager, you can consider using a notebook to keep track of your passwords. (Before writing down login information for work in a notebook, check with your company's IT department. Many have prohibitions against writing down passwords.) This works great if you primarily access the internet from home on one device. However, if your computer travels or you use many different devices, this becomes a problem. Your notebook could be lost, exposing your passwords, or you could leave the notebook at home and not have any way to access your information.
If you do use a notebook, do not write your user names along with your passwords. If your notebook is stolen, someone will have quick access to your accounts if both are written down. You can also write down your user name along with some generic hints that remind you about your password. This way, you will know your password by reading it, but others will be unable to decipher your password from the information.
If you are wondering what I use, the only simple answer is: "All of the above". There are many accounts that I only access from my primary computer. I use a password manager installed on my computer to provide me quick access and secure passwords for these accounts. For my most-used accounts (email, Facebook, bank, etc.), I simply remember the passwords. And I store user names and hints for all of my passwords in a password-protected file that I store in my Dropbox account, making it accessible on all my devices.
Obviously, my solution is not going to work for everyone. Some people will find that a notebook in a desk drawer will work fine. Some will be willing to take the risk to have the convenience of an online password manager. Others might opt for a hybrid solution like me. Whatever method you choose, be willing to accept the risks and inconveniences that will come with your method, and don't be afraid to try out different methods until you find the one that works best for you.
Monday, November 3, 2014
Can Software Keep Windows XP Safe?
I received a question this week regarding ads on TV that promise to keep Windows XP safe. The customer specifically asked if this product would allow someone to continue to use Windows XP even though Microsoft is no longer supporting it.
I responded by stating that not only would this product not be able to keep Windows XP completely safe, but also that I would not trust a security product that promises that they can keep Windows XP completely safe.
Yes, this program may be able to keep Windows XP safer than if you did not have it, but that would be true for any security product. However, there is much more to keeping Windows safe than what this program can do. There are holes in any version of Windows that can be exploited, and only modifications to the source code can fix these holes. Since Microsoft does not release the source code for Windows, this program would be unable to find the exact hole and patch it. It might be able to provide a workaround that renders the hole useless, but the hole will remain unless Microsoft release a patch (which it says it will not do).
Yes, I realize that many people do not want to upgrade to anything newer than Windows XP. However, XP is now 13 years old, and that is well beyond the lifetime for a technology product. When XP was released, the first Blackberry device was two years away from its release, and the iPhone would not come along for another six years. Hard drives were measured in tens of gigabytes instead of terabytes, and 256 MB of RAM was considered adequate (most systems now use at least eight to sixteen times that amount). If you have a Windows XP computer, the simple fact is that it is time to upgrade.
Software may be able to help keep Windows XP safer, but nothing will be able to keep XP completely safe. Without patches from Microsoft, Windows XP is a risk, especially when it is online. If you want to keep your XP computer around as a device for your kids to play games on or for you to type a few documents while offline, that is fine. But if your primary internet computer is running XP, then you need to upgrade!
I responded by stating that not only would this product not be able to keep Windows XP completely safe, but also that I would not trust a security product that promises that they can keep Windows XP completely safe.
Yes, this program may be able to keep Windows XP safer than if you did not have it, but that would be true for any security product. However, there is much more to keeping Windows safe than what this program can do. There are holes in any version of Windows that can be exploited, and only modifications to the source code can fix these holes. Since Microsoft does not release the source code for Windows, this program would be unable to find the exact hole and patch it. It might be able to provide a workaround that renders the hole useless, but the hole will remain unless Microsoft release a patch (which it says it will not do).
Yes, I realize that many people do not want to upgrade to anything newer than Windows XP. However, XP is now 13 years old, and that is well beyond the lifetime for a technology product. When XP was released, the first Blackberry device was two years away from its release, and the iPhone would not come along for another six years. Hard drives were measured in tens of gigabytes instead of terabytes, and 256 MB of RAM was considered adequate (most systems now use at least eight to sixteen times that amount). If you have a Windows XP computer, the simple fact is that it is time to upgrade.
Software may be able to help keep Windows XP safer, but nothing will be able to keep XP completely safe. Without patches from Microsoft, Windows XP is a risk, especially when it is online. If you want to keep your XP computer around as a device for your kids to play games on or for you to type a few documents while offline, that is fine. But if your primary internet computer is running XP, then you need to upgrade!
Friday, October 31, 2014
Search for Sex Offenders Near You
Tonight, millions of kids across the country will take to the streets for trick-or-treating. Obviously, for parents, safety is an important concern when your kids will be knocking on the doors of people you may not know.
One thing you can check (even when it is not Halloween) are the state and national sex offender registries. While it only lists those who have been caught and are keeping their information up-to-date, it can be helpful to know if there is an offender living near you.
You can view the registry at http://www.nsopw.gov/.
One thing you can check (even when it is not Halloween) are the state and national sex offender registries. While it only lists those who have been caught and are keeping their information up-to-date, it can be helpful to know if there is an offender living near you.
You can view the registry at http://www.nsopw.gov/.
Thursday, October 30, 2014
Fix a Scratched CD/DVD
As careful as we may try to be, sometimes our CDs or DVDs end up getting scratched. However, a scratch does not automatically mean that your disc has become an expensive coaster for your living room table. There still may be ways to restore your disc to optimal condition.
Two quick notes: first, it is important to understand that your best option is to not let your disc get scratched. Any of these methods for repairing a scratch may help, but they also have the potential to hurt the disc. Second, whenever possible, it is advisable to make a backup copy of your disc on your computer or on another disc. Burning a backup copy of a disc is legal as long as it is only for personal use and it does not circumvent any digital rights protections built in.
Once a scratch does occur, the first step to take would be to clean the surface with a jewelry-polishing cloth. These cloths are fairly inexpensive and available at most stores that sell jewelry. This removes some of the dust and dirt that can accumulate in the scratches and eliminates other areas of the disc as the problem. (You might find that the light scratch isn't the problem at all). To avoid causing further damage, rub the disc from the center to the outside and back, not along a circular path.
If this does not work, you can use a variety of substances to try to fill in the scratch. I have heard of people using car wax, furniture polish, petroleum jelly, and even banana to fill it in. I would recommend the car wax personally, but you can choose whatever you have available. Once again, always be sure to rub from the center to the outside of the disc, and make sure you give it plenty of time to dry (overnight would be best) and clean it thoroughly before putting it back in your DVD player.
If you can't find any substance that will repair the scratch, then it might be time to approach it from a different angle. If you have a cheap or older player, find a friend with a new player that was reasonably expensive. Technology is always improving, and it might have improved enough so that the latest players can read what your older device cannot. This might have the lowest probability of success, but it is worth a shot if nothing else is working. If it works on your friend's player, it might be time to upgrade yours.
Finally, when you have run out of options to do it yourself, turn to your local movie rental store. Almost all of them have devices that will buff dics and remove the scratches. Find a friendly-looking clerk, explain the situation, and see if the clerk will help you out. Obviously, they are under no obligation to help you, but it would make business sense for them to do so. You could go the DIY route and buy a machine yourself, but unless you have a lot of scratched discs, your wallet would probably be better off replacing your scratched discs.
If the $500+ machine at the movie-rental store can't help you, then it is time to buy a new disc or say goodbye to your movie or music. Obviously, with a music CD, you can always burn the unaffected tracks to a new CD to use in the meantime.
Two quick notes: first, it is important to understand that your best option is to not let your disc get scratched. Any of these methods for repairing a scratch may help, but they also have the potential to hurt the disc. Second, whenever possible, it is advisable to make a backup copy of your disc on your computer or on another disc. Burning a backup copy of a disc is legal as long as it is only for personal use and it does not circumvent any digital rights protections built in.
Once a scratch does occur, the first step to take would be to clean the surface with a jewelry-polishing cloth. These cloths are fairly inexpensive and available at most stores that sell jewelry. This removes some of the dust and dirt that can accumulate in the scratches and eliminates other areas of the disc as the problem. (You might find that the light scratch isn't the problem at all). To avoid causing further damage, rub the disc from the center to the outside and back, not along a circular path.
If this does not work, you can use a variety of substances to try to fill in the scratch. I have heard of people using car wax, furniture polish, petroleum jelly, and even banana to fill it in. I would recommend the car wax personally, but you can choose whatever you have available. Once again, always be sure to rub from the center to the outside of the disc, and make sure you give it plenty of time to dry (overnight would be best) and clean it thoroughly before putting it back in your DVD player.
If you can't find any substance that will repair the scratch, then it might be time to approach it from a different angle. If you have a cheap or older player, find a friend with a new player that was reasonably expensive. Technology is always improving, and it might have improved enough so that the latest players can read what your older device cannot. This might have the lowest probability of success, but it is worth a shot if nothing else is working. If it works on your friend's player, it might be time to upgrade yours.
Finally, when you have run out of options to do it yourself, turn to your local movie rental store. Almost all of them have devices that will buff dics and remove the scratches. Find a friendly-looking clerk, explain the situation, and see if the clerk will help you out. Obviously, they are under no obligation to help you, but it would make business sense for them to do so. You could go the DIY route and buy a machine yourself, but unless you have a lot of scratched discs, your wallet would probably be better off replacing your scratched discs.
If the $500+ machine at the movie-rental store can't help you, then it is time to buy a new disc or say goodbye to your movie or music. Obviously, with a music CD, you can always burn the unaffected tracks to a new CD to use in the meantime.
Wednesday, October 29, 2014
Do I Really Need to 'Safely Remove Device'?
Most of us know that we should use the "Safely Remove Device" feature in Windows before removing a flash drive (or any other type of USB device) from our computer. And most of us have probably figured out that you can simply pull the drive out and your files will still be there the next time.
If you don't know what I am talking about, each time you want to remove a USB drive (flash drive, external hard drive, etc.), Microsoft says you should go to the notification area of the taskbar (near the clock), click on the small icon that looks like a flash drive, and then select "Eject [Name of Drive]".
That brings us to the question: Is the "Safely Remove Device" feature even necessary? And the answer is: Definitely!
Yes, it is true that you can usually unplug a drive without any problem, but that is not always the case. There are many things that could be happening in the background that could harm your data if you do not use this feature. First, if the drive is in use, the files in use will most likely be corrupted. Using "Safely Remove Device" will prevent you from corrupting those files.
However, sometimes the drive will be in use when you don't realize it. The drive could be rewriting its file system (the directory of all the files on the drive). You might think it is okay to just pull the drive out because you haven't used the drive for several minutes, but if the file system is being modified and becomes corrupted when you pull the drive out, everything on the drive will be lost. Safely removing the drive will stop the rewrite at a safe place so you can remove the drive.
Second, you can enable performance features on a drive that make it even more important to use this feature. Windows can be programmed to cache data being written to a drive. This saves the data on your hard drive until Windows determines that it is best to write it to the flash drive. (This can keep your system from becoming strained by low resources or demanding programs.) While this feature is disabled by default, you probably cannot tell me for sure that caching has been disabled on your computer without checking. It is best to treat your files as safe as you can!
For these two reasons alone, it is best to always safely remove your device before you remove it. In fact, the only time you should remove a drive without this feature is if you have already shut the computer off. Otherwise, the few seconds you save by not using this feature will be more than wasted if you have to recreate all the files on the drive or spend time and/or money trying to recover data.
If you don't know what I am talking about, each time you want to remove a USB drive (flash drive, external hard drive, etc.), Microsoft says you should go to the notification area of the taskbar (near the clock), click on the small icon that looks like a flash drive, and then select "Eject [Name of Drive]".
That brings us to the question: Is the "Safely Remove Device" feature even necessary? And the answer is: Definitely!
Yes, it is true that you can usually unplug a drive without any problem, but that is not always the case. There are many things that could be happening in the background that could harm your data if you do not use this feature. First, if the drive is in use, the files in use will most likely be corrupted. Using "Safely Remove Device" will prevent you from corrupting those files.
However, sometimes the drive will be in use when you don't realize it. The drive could be rewriting its file system (the directory of all the files on the drive). You might think it is okay to just pull the drive out because you haven't used the drive for several minutes, but if the file system is being modified and becomes corrupted when you pull the drive out, everything on the drive will be lost. Safely removing the drive will stop the rewrite at a safe place so you can remove the drive.
Second, you can enable performance features on a drive that make it even more important to use this feature. Windows can be programmed to cache data being written to a drive. This saves the data on your hard drive until Windows determines that it is best to write it to the flash drive. (This can keep your system from becoming strained by low resources or demanding programs.) While this feature is disabled by default, you probably cannot tell me for sure that caching has been disabled on your computer without checking. It is best to treat your files as safe as you can!
For these two reasons alone, it is best to always safely remove your device before you remove it. In fact, the only time you should remove a drive without this feature is if you have already shut the computer off. Otherwise, the few seconds you save by not using this feature will be more than wasted if you have to recreate all the files on the drive or spend time and/or money trying to recover data.
Tuesday, October 28, 2014
One Important Setting to Check
I recently replaced the power jack on a laptop, but when I finished replacing it, I found that the computer would not completely boot. While I do not know the exact reason for the problem, my suspicion is that Windows was in the process of performing an update when the system lost power. There would have been a simple way to fix the boot process, but unfortunately, this computer had that feature disabled.
The System Restore feature will allow your system to recover from many problems, including malware, a corrupt registry, or a failed update. However, if it is disabled, you will find that you have no restore points available when you need to use it!
Unless you have a very good reason for disabling it, I highly recommend that you enable System Restore. This feature may not only allow you to recover your system from a failure, but it may also save your important files from the Cryptolocker or Cryptowall ransomware. These programs encrypt your files and require you to pay a fee to get the encryption key to decrypt them. However, System Restore may save shadow copies of your files that will remain unencrypted. They may not be the most up-to-date versions of your files, but they are better than either losing them completely or having to pay the ransom to get your files back.
To see if you have System Restore enabled, follow these instructions:
Windows Vista:
1) On the start menu, right click on Computer and choose Properties.
2) Click on System Protection on the left side.
3) Respond to a UAC box if it appears.
4) About halfway down the window, look for your main hard drive. It will usually say "(System)" after it. If the box in front of it is checked, you are fine.
5) If the box is not checked, then check it and hit Apply.
6) If you just enabled System Restore, click on the Create button to create a restore point right now.
Windows 7:
1) On the start menu, right click on Computer and choose Properties.
2) Click on System Protection on the left side.
3) About halfway down the window, look for your main hard drive. It will usually say "(System)" after it. If it says "On", you are fine.
4) If it says "Off", then select the drive and click on Configure. Then select, "Restore system settings and previous versions of files".
5) If you just enabled System Restore, click on the Create button to create a restore point right now.
Windows 8/8.1:
1) Go to the charms bar, and select Settings, then PC Info.
2) Click on System Protection on the left side.
3) About halfway down the window, look for your main hard drive. It will usually say "(System)" after it. If it says "On", you are fine.
4) If it says "Off", then select the drive and click on Configure. Then select, "Turn on system protection".
5) If you just enabled System Restore, click on the Create button to create a restore point right now.
The System Restore feature will allow your system to recover from many problems, including malware, a corrupt registry, or a failed update. However, if it is disabled, you will find that you have no restore points available when you need to use it!
Unless you have a very good reason for disabling it, I highly recommend that you enable System Restore. This feature may not only allow you to recover your system from a failure, but it may also save your important files from the Cryptolocker or Cryptowall ransomware. These programs encrypt your files and require you to pay a fee to get the encryption key to decrypt them. However, System Restore may save shadow copies of your files that will remain unencrypted. They may not be the most up-to-date versions of your files, but they are better than either losing them completely or having to pay the ransom to get your files back.
To see if you have System Restore enabled, follow these instructions:
Windows Vista:
1) On the start menu, right click on Computer and choose Properties.
2) Click on System Protection on the left side.
3) Respond to a UAC box if it appears.
4) About halfway down the window, look for your main hard drive. It will usually say "(System)" after it. If the box in front of it is checked, you are fine.
5) If the box is not checked, then check it and hit Apply.
6) If you just enabled System Restore, click on the Create button to create a restore point right now.
Windows 7:
1) On the start menu, right click on Computer and choose Properties.
2) Click on System Protection on the left side.
3) About halfway down the window, look for your main hard drive. It will usually say "(System)" after it. If it says "On", you are fine.
4) If it says "Off", then select the drive and click on Configure. Then select, "Restore system settings and previous versions of files".
5) If you just enabled System Restore, click on the Create button to create a restore point right now.
Windows 8/8.1:
1) Go to the charms bar, and select Settings, then PC Info.
2) Click on System Protection on the left side.
3) About halfway down the window, look for your main hard drive. It will usually say "(System)" after it. If it says "On", you are fine.
4) If it says "Off", then select the drive and click on Configure. Then select, "Turn on system protection".
5) If you just enabled System Restore, click on the Create button to create a restore point right now.
Subscribe to:
Posts (Atom)