Wednesday, May 17, 2017

May 2017 - Monthly Mini-Bytes

How to Protect Yourself from Ransomware
Fallout from the WannaCry Worm

You may have been hearing about this WannaCry ramsomware worm that has taken down computers across the globe, extorting their owners of hundreds of dollars to unlock data held "ransom." The good news is that it only impacts Windows PCs, but as Mac users we may not always be so lucky.

It is true that the Unix underbelly of macOS protects us, but here are some things that you can do to make sure that you hedge your bets against becoming a victim:

Do Your Updates: I know so many people that are reluctant to do updates. Well, the hard truth is that you need to do them. You must make sure that you are on a currently supported operating system both on your Macs and iPhones and iPads. This will ensure that you have all the most up to date security. And truth be told, if you are holding back on upgrading because your older software will not run on a current system, then you are hurting yourself there, too. Old software can be a gateway to malware entering your machine. 

Enable File Vault Encryption: You can encrypt your drive yourself using the File Vault feature in macOS. Since your hard drive would be encrypted, it makes it next to near impossible for ramsomware to attack your data. You can also encrypt your backup drive, too. Word of Warning: Enabling File Vault WILL slow down your machine. We only recommend enabling it if you have a Solid State Drive. If you do graphic design or video editing, it is not a great idea. File Vault options can be found in System Preferences under Security & Privacy.

Backup Your Mac: It sounds simple -- just back it up. If you run a Time Machine backup along with an off-site cloud backup, then you can always restore your system from scratch. Those Windows victims of WannaCry who had backups were inconvenienced, but had the option of wiping their drives, destroying the worm and then getting back to business with a data restore from that backup.

Don't Be A Victim: Adobe Flash Player Scam
The Best Way to Stay Up To Date

Adobe Flash Player is one of those applications that is still used across the internet. Not having it active or up to date can impact everything from reading webmail to video streaming. But there is a scam out there that many have fallen for.

While surfing said internet a pop-up appears saying that you need to update Adobe Flash. You click on the link, download the software, and all of a sudden you are infected with malware. 

So, what's the best and safest way to update? Go into System Preferences and click on Flash Player. Select the Update tab and take note of the options below. By selecting "Allow Adobe to install updates" Flash Player will do all the work and keep itself current. If you get a pop-up online, you can just ignore it as you know it is fake. If you choose one of the other two options, we do recommend going back here to click on the Check Now button. If an update is required it will direct you to Adobe's site where you can pull it down directly from their servers.

And what about NPAPI and PPAPI? 99.9% of you only need the NPAPI plugin. No need to worry about PPAPI.

Know Your Passwords
Memorization Not Required

Here is the straight truth: You need to know your passwords. Period. You don't need to have them memorized, but you need to have them somewhere that is accessible to you. As you can see with this whole WannaCry worm, it's not 1996 anymore. The internet is a seedy back alley filled with those who wish to steal your money, take your data, and otherwise ruin your day. Your passwords are your line of defense, so keeping them secure, updated, and known by you is paramount.

How you keep your passwords is up to you. I've known people to use various methods, but the best is one that you are comfortable with, is secure, and can be readily updated. From encrypted spreadsheets, to secret codes, to some of those password services, there are many options out there, but pick one and use it.

No one on the planet has all of their passwords memorized -- and it's not necessary if you are organized and have a plan. My advice: Have a plan...