Securing your home wireless network (Part I)

I have neglected our blog recently and thought it was time to add some content to our blog. If you want the technical process and language for securing your wireless network try googling “securing home wireless network“. You can also visit the manufacturer’s website (i.e. Linksys, Belkin, D-Link, etc.) of your wireless router. Some important things to remember is to always set a secure password (include letters, numbers and special characters) to your router’s control panel that is accessed by visiting your local private domain usually http://192.168.1.1 (see your owner’s manual). If you do not secure your router’s control panel you are giving anyone access to create protocol and permissions on your local home network. We are living in a PDA/portable media device world and anyone can come within reach of your home’s wi-fi signal (pulling vehicle in your driveway or passing close to your home) and access your unsecured home network. Your router is a computer itself and can be used to infiltrate your home computer and other media devices.

Once you have created a secure password (IMPORTANT: REMEMBER YOUR PASSWORD) for accessing and managing your router via the control panel now comes the process of connecting your wireless devices to your home network. You can do this in several ways:

1) assign each device a MAC address (physical address) (see also MAC address filtering in your router’s manual or control panel)

2) Enable a password-protected encryption so only devices with the proper permissions (i.e. password) can access the home network.

To find your computer’s MAC address you will need to do this from Command Prompt with the “ipconfig/all” command

(Windows Users)

If you have TCP/IP installed, run   ipconfig/all   from a Command Prompt window.

(click Start, then Run, then type cmd in the text box.)

Type in ipconfig/all in the Command Prompt Windows.

The 12-digit Physical Address is the same as MAC address

WPA/WEP Encryption: encryption scrambles your WI-FI signal and helps secure your home network. Make sure your wireless password is secure. Often routers will ask the user if you want the router to generate a password for you, which is helpful in creating a unique password.

Remember to change your SSID (Service Set Identifer) name to something unique (i.e. JoHn DoE_NeTwOrK123). Most manufacturer’s ship the router by its default name on all of the units or models (i.e. linksys, default, etc.). You also want to disable SSID broadcasting. This will prevent unauthorized users from obtaining your SSID and accessing your network.

These are just a few tips for securing your home wireless network and protecting you and your family from becoming victimized. While we could write a book on this topic, these are the basics that you need to creating a good, secure relationship with your wireless router.

NOTE: ALWAYS REFER TO YOUR OWNER’S MANUAL OR CONTACT THE MANUFACTURER FOR TROUBLESHOOTING ISSUES RELATED TO A ROUTER OR WIRELESS ROUTER.

Red Robin & NCMEC team up to promote Internet Safety

The National Center for Missing & Exploited Children (NCMEC) announced today that it has partnered with Red Robin International, Inc. to promote internet safety through a new cookbook that encourages families to cook together. The cookbook is $5 and profits now through Aug 10, 2008 will go to NCMEC. The cookbook contains 50 kid invented gourmet burger recipes. Please support your local Red Robin restaurant. Visit www.redrobin.com

Here is a direct link to the cookbook: https://www.etoolsengine.com/rrcookbook/default2.aspx

Google technology could save exploited children

Working with law enforcement, analysts at the National Center for Missing and Exploited Children (NCMEC) in Alexandria, Va., spend their days doing something no one should have to do. They look at what is called “child pornography,” but the photos and videos are actually evidence of children - in some cases infants - being sexually abused.

Source: http://www.ncmec.org/missingkids/servlet/NewsEventServlet?LanguageCountry=en_US&PageId=3644

IRS warns of e-mail and phone scams

IRS Warns of New E-Mail and Telephone Scams Using the IRS Name; Advance Payment Scams Starting

 
The Internal Revenue Service today warned taxpayers

Click here to continue reading this article.

Source: IRS.Gov

Password Security

What’s Your Password?

Steve came across a very interesting article the other day and lucky for all of you, he shared it with me! How does that make you lucky, you ask? Well, the article is titled “10 Most Common Passwords” and it included some mind blowing information that, in my opinion, all of you should know about too. Below is a list of the 10 most commonly used passwords by computer users today. Check it out!

1.) password
2.) 123456
3.) qwerty
4.) abc123
5.) letmein
6.) monkey
7.) myspace1
8.) password1
9.) link182
10.) your first name

Now, let me ask you this: Is your current password on that list? If so, I bet you already know what’s coming next. Yep, you are putting yourself at great risk by using a password like that. Passwords like those can be guessed by hackers in a matter of seconds, which means you’re only making things easier for them. All in all, if you’re using one of the above passwords, I urge you to change it right away. If you need help coming up with a more secure password, read this tip.
http://www.worldstart.com/tips/tips.php/4551
It’s very easy to create a password that will keep you better protected, so please do it today. For goodness sake, please keep yourself safe!

~ Erin

Author: Erin with WorldStart.com

Exploit for Facebook and MySpace Image Uploader Vulnerability

Publicly Available Exploit for Facebook and MySpace Image Uploader Vulnerability

added February 4, 2008 at 10:28 am | updated February 4, 2008 at 11:38 am
US-CERT is aware of publicly available exploit code for an unpatched vulnerability affecting an image uploader used by Facebook and MySpace. This vulnerability is caused by a buffer overflow in Aurigma’s ImageUploader ActiveX control. Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code on an affected system.

More information regarding this vulnerability can be found in Vulnerability Note VU#776931.

US-CERT encourages users to Disable ActiveX controls as described in the Securing Your Web Browser document.

US-CERT will continue to investigate and provide additional information as it becomes available.

Source: produced by US-CERT

**Support House Bill 1329**

House Bill 1329

Senate Bill 79 never made it to the floor to be voted on because the Senate has such a “bill load” this session.

The bill is now being introduced in the House and additional information has been added to this bill. Visit the following link for more information

Source: http://www.in.gov/apps/lsa/session/billwatch/billinfo?year=2008&session=1&request=getBill&doctype=HB&docno=1329

DIGEST OF HB1329 (Updated January 30, 2008 5:57 pm - DI 84)

Sex offenses and children. Provides that, as a condition of probation or parole, a sex offender: (1) must consent to the search of the sex offender’s computer at any time; (2) must permit installation on the sex offender’s computer or device with Internet capability of hardware or software to monitor the sex offender’s Internet usage; (3) may be prohibited by a probation or parole officer from using or accessing certain web sites, chat rooms, or instant messaging programs; and (4) may not delete, erase, or tamper with information on the sex offender’s computer that relates to Internet usage. Requires a school corporation to include a mandatory instructional unit on safely using the Internet for grades 3 and above. Makes it a Class A misdemeanor for a person at least 21 years of age to propose a face to face meeting with a child less than 14 years of age by computer network or cellular telephone text message if the communication between the parties involves a reference to sexual activity, and enhances the crime to a Class D felony for a second or subsequent offense. Specifically provides that law enforcement officials may seize computers and other equipment used to commit or facilitate sex crimes. Provides that a person who knowingly or intentionally: (1) photographs a person who is in a state of nudity and is in an area in which a person would reasonably be expected to disrobe; and (2) fails to destroy the image that was photographed, shows the image to another person, publishes the image, or makes the image available on the Internet, after the person who was photographed asks the person to destroy or not show the image, commits photographic voyeurism, a Class A misdemeanor. Prohibits an offender against children from entering or loitering within 1,000 feet of school property, a youth program center, or a public park if the offender knows that children are present. Provides a defense if the offender enters the school property, youth program center, or public park to vote, or if the offender enters a school to attend a meeting with school personnel concerning the offender’s child and the offender: (1) has notified the school that the person is an offender against children; and (2) is accompanied by a school employee to and from the meeting.

**SUPPORT INDIANA SENATE BILL NO. 79**

State Senator Waltz (R-Greenwood) has introduced State Senate Bill No. 79
that targets sexual predators using social networking sites.

Synopsis: Makes it a Class A misdemeanor for a convicted sex
offender
to use a social networking program frequented by children or an
instant messaging or chat room program. Increases the penalty to a Class D
felony if the offender against children uses the program to contact a child or
has a prior conviction under this statute. If Senate Bill is passed by the
senate and house of representatives and is eventually signed into law by
Governor Daniels then this bill be effective July 1, 2008 and applies to crimes
committed after June 30, 2008

Effective: July 1, 2008.

Source:

http://www.in.gov/legislative/bills/2008/IN/IN0079.1.html

MySpace Safety Tips

A few safety tips we want to pass along when using MySpace and some tips to protect your privacy.

1. Set your profile to private. There are a lot of teens that don’t protect their privacy and therefore are broadcasting their profile to the world.

2. Change your password regularly and include upper/lower case letters, numbers, and special characters (i.e. &^$#) in combination. Your password for MySpace should NOT be the same as the password that you use to access your e-mail. If someone obtains your MySpace password they also will have access to your e-mail if the MySpace password is the same.

3. Pre-Approve comments before they are posted to your profile.

4. Do not display your status as “Online Now” if you want to protect others from seeing when you are online.

5. Block Users and Report them to MySpace

6. Remember that MySpace is a public place. Once a picture is posted online it is like a picture that never comes down. Every time the picture is displayed it is stored on a user’s computer. NEVER post any obscene or inappropriate pictures!!

7. Avoid including your age and high school you attend in your profile is set to public. A child predator or an identity thief would have an easy time locating you.

8. Remember if you do not know them then DON’T add them as a friend!

Be Safe!!

WI-FI: Risks with public ‘hotspots’

If you’re traveling for the holidays, be careful when you use wi-fi hotspots in public places. “Few things expose your [computer] to greater security risks than latching onto a public Wi-Fi service,” USATODAY reports. “Computer criminals can ’sniff’ the traffic in a cafe, or set up a fake hot spot that you might innocently log into. When that happens, watch out: Everything you type goes directly to the host computer, known as an ‘evil twin’.” The “twin is ready to grab passwords, financial info, etc. Some retailers with wireless service are now advertising secure connectivity, which really helps. If you log on and see “https” instead of “http,” your connecting is also probably secure. USATODAY has a sidebar with other tips.