AskBillFirst – Non-Tech Speak Technology Blog

Big Brother is coming in more ways than one. Technology is often a two-edged sword. In this case, this school district apparently decided that since they owned the laptops they could control it at all times.

If your laptop computer’s webcam could talk about what it sees, what would it say?

Students of a Pennsylvania school district are hauling educators to court over allegations that administrators remotely activated the webcams on school-issued laptops and used that remote access to spy on students and their family members. (Techmeme)

The civil suit (PDF) was filed last week against the Lower Merion School District in Ardmore, PA, its board of directors and the Superintendent. It alleges violations of the electronic Communications Privacy Act, The Computer Fraud Abuse Act, the Stored Communications Act, the Civil Rights Act, the Fourth Amendment of the U.S. Constitution, the Pennsylvania Wiretapping and Electronic Surveillance Act and Pennsylvania Common Law. In part, the suit reads:

Unbeknownst to Plaintiffs and the members of the Class, and without their authorization, Defendants have been spying on the activities of Plaintiffs and Class members by Defendants’ indiscriminant use of and ability to remotely activate the webcams incorporated into each laptop issued to students by the School District, This continuing surveillance of Plaintiffs’ and the Class members’ home use of the laptop issued by the School District, including the indiscriminant remote activation of the webcams incorporated into each laptop, was accomplished without the knowledge or consent of the Plaintiffs or the members of the class.

The suit notes that there are about 1,800 students in the district’s two high schools and that students were each assigned a laptop computer that was purchased, in part, through state and federal grants secured over the past few years. The suit also notes that all of the written documentation that accompanied the laptop made no reference to the district’s ability to remotely activate the embedded webcam.

The issue came to light in November when an assistant principal informed a student about improper behavior in his home and produced a photograph captured from the laptop’s webcam as proof. The suit did not specify the type of activity the student was engaged in.

Because the webcam would capture images of anything in its range, including the actions of other household members and their guests, the plaintiffs in the case extend to family members, as well as the students themselves.

Sam Diaz

Sam Diaz is a senior editor at ZDNet. See his full profile and disclosure of his industry affiliations.

via When webcams go bad: Students sue school officials for remote spying | Between the Lines | ZDNet.com.

Filed under: Instructional, PC Security, Uncategorized | Leave a comment »

If Your Password Is 123456, Just Make It HackMe

By ASHLEE VANCE

Published: January 20, 2010

Back at the dawn of the Web, the most popular account password was “12345.”

The New York Times

Today, it’s one digit longer but hardly safer: “123456.”

Despite all the reports of Internet security breaches over the years, including the recent attacks on Google’s e-mail service, many people have reacted to the break-ins with a shrug.

According to a new analysis, one out of five Web users still decides to leave the digital equivalent of a key under the doormat: they choose a simple, easily guessed password like “abc123,” “iloveyou” or even “password” to protect their data.

“I guess it’s just a genetic flaw in humans,” said Amichai Shulman, the chief technology officer at Imperva, which makes software for blocking hackers. “We’ve been following the same patterns since the 1990s.”

Imperva found that nearly 1 percent of the 32 million people it studied had used “123456” as a password. The second-most-popular password was “12345.” Others in the top 20 included “qwerty,” “abc123” and “princess.”

More disturbing, said Mr. Shulman, was that about 20 percent of people on the RockYou list picked from the same, relatively small pool of 5,000 passwords.

That suggests that hackers could easily break into many accounts just by trying the most common passwords. Because of the prevalence of fast computers and speedy networks, hackers can fire off thousands of password guesses per minute.

via Simple Passwords Remain Popular, Despite Risk of Hacking – NYTimes.com.

There are several password generation programs available that will make and remember random passwords for different sites and needs. I highly recommend them. The one I use is Roboform. You can read my blog entry about it here: Now What Was That Password Again?

Filed under: Instructional, PC Security, Uncategorized | 1 Comment »

Acer Recalls Notebook Computers Due to Burn Hazard

WASHINGTON, D.C. – The U.S. Consumer Product Safety Commission, in cooperation with the firm named below, today announced a voluntary recall of the following products. Consumers should stop using recalled products immediately unless otherwise instructed.

Name of Product: Certain Acer Aspire-series Notebook Computers

Units: About 22,000

Manufacturer: Acer America Corporation, of San Jose, Calif.

Hazard: An internal microphone wire under the palm rest can short circuit and overheat. This poses a potential burn hazard to consumers.

Incidents/Injuries: Acer has received three reports of computers short circuiting, resulting in slight melting of the external casing. No incidents occurred in the United States. No injuries have been reported.

Description: The recalled notebook computer models are the Acer AS3410, AS3410T, AS3810T, AS3810TG, AS3810TZ and AS3810TZG. The computer’s screen size is about 13.3 inches measured diagonally. Not all units are affected. Consumers should contact Acer to determine if their unit is included in the recall.

Sold at: ABS Computer Technologies, D&H Distributing, Fry’s Electronics, Ingram Micro, Radio Shack, SED/American Express, Synnex Corporation, SYX Distribution, Tech Data Corporation and other retailers nationwide and Amazon.com from June 2009 through October 2009 for between $650 and $1,150.

Manufactured in: China

Remedy: Consumers should stop using the recalled notebook computers immediately and contact Acer to determine if their notebook is affected and to receive a free repair.

Consumer Contact: For additional information, contact Acer toll-free at (866) 695-2237 anytime, or visit the firm’s Web site at www.acer.com

via Acer Recalls Notebook Computers Due to Burn Hazard.

Filed under: Instructional, PC Security, Uncategorized | 1 Comment »

Just a note – I posted this in 2009 at this time and I see it’s going around this year again. The e-mail that touts this virus is a hoax.

With a subject line like that, how could I ignore it? I received an e-mail from a friend who asked if this was real? According to the message, Norton, Snopes, CNN, Microsoft and McAfee are all legitimizing this so it must be true, right? Well, in this case, it’s partially right in that it’s a warning to be careful. However, there are a lot of scare tactics used which should tell you that the content isn’t true. Read the e-mail message below and I’ll explain myself afterwards.

Hi,

A check made with Norton Anti-Virus indicates that they are gearing up for this virus!

Snopes was checked as well, and it is for real. Get this E-mail message sent around to all your contacts ASAP.

PLEASE FORWARD THIS WARNING AMONG YOUR FRIENDS, FAMILY AND CONTACTS!

You should be alert during the next few days. Do not open any message with an attachment entitled ‘POSTCARD FROM HALLMARK,’ regardless of who sent it to you. It is a virus which opens A POSTCARD IMAGE, which ‘burns’ the whole hard disc C drive of your computer.

This virus will be received from someone who has your e-mail address on his/her contact list. That is the reason why you need to send this e-mail to all your contacts. It is better to receive this message 25 times than to receive the virus and open it!

If you receive a mail called’ POSTCARD,’ even if it is sent to you by a friend, do not open it! Shut down your computer immediately. This is the worst virus announced by CNN.

It has been classified by Microsoft as the most destructive virus ever. This virus was discovered by McAfee yesterday, and there is no repair yet for this kind of virus. This virus simply destroys the Zero Sector of the Hard Disc, where the vital information is kept.

COPY THIS E-MAIL, AND SEND IT TO YOUR FRIENDS.
REMEMBER: IF YOU SEND IT TO THEM, YOU WILL BENEFIT ALL OF US

In this case, it says the virus will be delivered via an electronic card.  One of the ways that malware can get onto a computer is by clicking on a link or opening an attachment in an e-mail that will then download and try to install the payload. One way that the malware writers try to get you to click on the link is by making it look like it’s an e-card from a friend or family member. That’s been going on for sometime. So, that being said, you need to be careful anytime/everytime you think about clicking on a link in an e-mail, especially if it’s an e-card greeting. Legitimate greetings will tell you to go to a website and enter a code to see the greeting so you won’t have to click on a link.

Any time you get an e-mail message telling you to pass it on to everyone you know, especially since everyone is preparing for it and Snopes says it’s true (even though in this case Snopes really doesn’t even discuss it), question it. Go to an antivirus website and check their “hot” virus list. Mcafee’s Threat Center, Symantec Threat Explorer, US Government Threat Center will let you know what’s the current threats are. Then, you can decide whether to pass it on to everyone in your contacts or not.

Consider this with any message that you get “to pass on”. There was a warning from people about Facebook letting Google index everything about you starting that day. I saw the warning in several e-mails, a couple of groups and on Facebook.  I little detective work showed that Facebook had actually been doing that for the past 2 years, but not with “everything”, only with what the user has designated to be shared to everyone. What is set to be seen by only friends doesn’t and won’t be indexed.

So, if you receive a warning, take it as such and check the validity. Feel free to e-mail me and I’ll let you know if it’s legitimate or not and if so, what you need to do to protect yourself. Comments?

Filed under: Instructional, PC Security, Uncategorized | 2 Comments »

There’s a lot of money to be made in malware. That’s what keeps it going….

WASHINGTON (Reuters) –

Tens of millions of U.S. computers are loaded with scam security software that their owners may have paid for but which only makes the machines more vulnerable, according to a new Symantec report on cybercrime.

Cyberthieves are increasingly planting fake security alerts that pop up when computer users access a legitimate website. The “alert” warns them of a virus and offers security software, sometimes for free and sometimes for a fee.

“Lots of times, in fact they’re a conduit for attackers to take over your machine,” said Vincent Weafer, Symantec’s vice president for security response.

“They’ll take your credit card information, any personal information you’ve entered there and they’ve got your machine,” he said, referring to some rogue software’s ability to rope a users’ machine into a botnet, a network of machines taken over to send spam or worse.

Symantec found 250 varieties of scam security software with legitimate sounding names like Antivirus 2010 and SpywareGuard 2008, and about 43 million attempted downloads in one year but did not know how many of the attempted downloads succeeded, said Weafer.

“In terms of the number of people who potentially have this in their machines, it’s tens of millions,” Weafer said.

It was also impossible to tell how much cyberthieves made off with but “affiliates” acting as middlemen to convince people to download the software were believed to earn between 1 cent per download and 55 cents.

TrafficConverter.biz, which has been shut down, had boasted that its top affiliates earned as much as $332,000 a month for selling scam security software, according to Weafer.

“What surprised us was how much these guys had tied into the whole affiliated model,” Weafer said. “It was more refined than we anticipated.”

(Reporting by Diane Bartz; editing by Gunna Dickson)

via Fake security software in millions of computers: Symantec by Reuters: Yahoo! Tech.

Filed under: Instructional, PC Security, Uncategorized | 3 Comments »