Cell Phone Security Passwords

There are a couple of different types of Password entry methods like the Android Dot swipes or the Apple 4 digit combo.  Each can be set to a lower or higher amount of security.  The Apple iPhone can be just a simple 4 number code, or in the settings you can increase the ability to put in a full fledge password that you can enter a full password like you would for any website.  You can also set it so that if the password is put in wrong 10 times it will wipe it-self.  This will put your phone into an out of the box state.  But with the right technology it can be recovered but your average regular joe or enemy will not have the skill to recover it.  The Android phones have multiple security settings as well and the connect the dot style password can provide sound security if used correctly.

Find what works best for you.  If you don’t like that you have to enter it every time the screen goes dark then make it so it requires the password after 20 minuets of not being used.  Just know your phone and know what it can do for you.  Try adding things and little at a time.  If you don't like something then don't use it or try something different.  The last thing you want to do is get frustrated at something and just turn everything off.  It will make it harder to use or get into your phone.  But that is the point.  It will make it even harder for the people who don’t know the passwords or limitations.

Now here is the “No Brainer” section.

DO NOT LIST:

Make your code easy.  Yes I said it.   I know you want to remember it.  I know you want to get to your text messages as quickly as possible.  Just as quick as you get in makes it that much easier for someone else to get in as well.

Make it something common like: 0000,1234, SSN, Last 4 of Phone Number.

Do not use common swipe methods on the Android like a box or a single line.

Don’t forget to wipe of the screen once in a while you may have left finger impressions where the digits are.

Do not make it so hard you just turn the password option off because you hate typing it in all the time

Do not write it down on something that will be with the phone.  If it is in a bag or purse it can possibly be found and used.  Nothing better for someone then a piece of paper with Cell Phone Password ********** written on it to help the criminal.

You cant stop everything.  Use your best judgement.  I hope this helped.

Cell Phone Security Intro

So as today's cell phone market rapidly expands and technology gets better we use our cell phone for more than we used to with those “Zach Morris” brick phones with the long rubber antenna.  Everything from family photos to word documents are now contained in this mini computer in our pocket or purse. These devices which people make references to often “have more technology than the space craft that put men on the moon” have the ability to go from texting to getting directions to checking your bank account.  So it is our own responsibility to take the proper steps to protect our things with in reason.  While we can not prevent everything.  We are going to mitigate as much damage or loss as possible.  How disconnected to you feel when you lose or don't have your cell phone with you.  Accidents happen.  You can drop your phone or leave it in a cab.  The worst case it could be stolen by someone who just wants your purse or your nice phone.

But what is it inside these gadgets that we need to protect.  Well that is up to you.  Maybe you do not keep anything of importance on them.  Others could be running their entire home business on them.  With contacts and email or credit card numbers to personally identifiable information.  We take pictures of precious moments with our children.  The applications we use in most cases do not require passwords to be re-entered for ease of use and some people even make note pad entries with all of their passwords and login's since they always have their phone on them.  They keep numbers for your family and work and access to the deep dark or not so dark secrets in your text messages.  Do you really want a complete stranger or your worst enemy getting a hold of it?  One of many security options to prevent the release of your personal information is to set a screen unlock code.

Fake Anti-Virus Pop Ups

So I recently received a call from a family member who was in distress.  Windows said they had 17 root kits, 23 viruses, and 17 malware.  I immediately knew what was wrong.  A pop up that looks just like your installed Windows protection programs.  You are told that you are infected and you need to act immediately.  It will download a program or ask for money in order to cure you of this.  The end result is either of to scenario's they want your credit card info or they want to install malware on your computer.  THIS IS A SCAM DO NOT BE TRICKED.

This is what they want.  But I assure you it is all a trick.  I have also received these Pop Ups.  But I use a Mac for my casual browsing.  So when this Windows Anti-Virus program begins its fake scan and summation of my infection I know that it is a hoax.  But to users that are on a Windows PC they think they are actually viewing a valid scan and report.  Windows or Microsoft does not require you do download fixes or request payment from you.  So all these facts in total prove its deception.

So what is happening here is a combination of amazing techniques.  Social Engineering, the hopes that users are untrained and unskilled at Windows, improper Internet Browser settings that allow these Pop Ups, and the hopes that the combination of these will make you fall for the scam.  I will help you try and understand or better defend yourself against such deception. 


Fear is being used in the form of Social Engineering.  Who would no be scared of having all these horrible things on their computer.  The Pop Up is showing so many infections and in large numbers in a sight familiar to you or unfamiliar to you.  They are preying on your fear of losing your pictures, documents, the fear of damage that will require a new install and have to start from scratch, and all the stories they have heard from their friends.  It is common for most people to not have a backup procedure in place.  So the videos of the kids or the pictures of your trip to distant place are now at the risk of being gone forever.  This is what they want.  This is what they expect.  Of course you are going to do what ever or click what ever it takes to keep everything from being corrupted and gone forever.

Basis computer training and knowledge are not always as great as others.  And everyone can not possibly know everything.  So you may not notice this is a Pop Up initiated from your Web Browser.  You may not run scans or have them run at a time that you are not actively using your computer.  You may not know all the tricks and traps that attackers use.  And they can change so frequent that you can not keep up unless that is your job.  You should become familiar with all the security products and software you have installed on your computer.  The Firewalls, the Anti-Virus, and the pre-installed security software from what ever flavor of Windows you use.  While it is plausible that you have become infected and to some degree of the extreme the numbers the pop up give are only to induce fear.  We are all becoming the residents of the Internet community.  And we must educate ourselves at the most basic functions and use of the internet.  I would not jump in the pool without knowing how to swim.  And if you do I suggest wearing floaties.

There are a few different browsers that can be used to interact with the World Wide Web.  Choose what you like best.  They each have their strengths and weaknesses.  It just comes down to personal opinion.  You just need to become familiarized with the nuts and bolts.  Go through the preferences.  Download the addons.  Find what works for you.  There is always a balance to be found with Security and Convenience.  The tighter the controls the harder it will be to display or use lots of bells and whistles on a website.  But on the other side it will keep bad things from happening like remote code or pop ups.  You just have to find what works for you because if it is too strict you are going to bypass it anyway.


Just use your best judgement.  Close the Virus scan and open your own.  The best security is the one you start yourself.  That being said don’t use security that is offered to you when you did not seek yourself.  I learned this from Steve Gibson a Master and Mentor to Security Professionals.

Facebook Account Settings (Notification, Subscribers, Apps)

Notifications

Recent Notifications:  Here you can see what Facebook is getting your attention with.   This is where you can find out how much Facebook annoys your or if you like it how much it keeps you informed.   So here you will see all the Likes, the Comments, people who have commented or liked something after you on another post or on your own post.  You can see what sends you more or less notifications and limit it down to what you would like to be notified about.  

Subscribers 

Here you will allow Subscribers which are people who can see what you post publicly with out being your friend as set by your restrictions. 

I dont see why you would unless you are a public figure.  Here you can set up what the public can see who are not exactly your friend they just keep tabs on you.  Like I said, unless your are super cool in the Cyberspace or a public figure I don't see the need for this.  

Apps 

This is a good place to check once in a while.  You will see what applications on Facebook or otherwise permission to work with your account.  So you can see many things here.  If you gave Bejeweled Blitz or Hanging with Friends permission to your page its here, and you can take that permission away.  If you gave Instagram or Dropbox permission it is here and you can take it away.  If its something you have not used in months and will not use again delete it.  If you see something weird, delete it and change your password.  This is a good place to keep an eye on things.

Facebook Account Settings (Security)

Security Question:  Here you select from a preset set of questions.  Remember If you pick something like Grandfathers occupation you can lie about it.  Say he was the president.  This will make it so that you and only you can answer this question and verify that it is you.

Secure Browsing: Check this box.  It makes it so that you will access Facebook with more security.  After you check this you will have https:// instead of http:// in the URL.  So if you see that you are in a http:// something is wrong.

Login Notifications:  You can be contacted via email or text or push notification.  This notification will let you know when someone has accessed your account.  So if you have not logged in for three days and your at work and cant log in and you get an email from Facebook that someone has logged into your account.  You will be prompted when you log into your account to say where it is that you are logging into from.  You can add or remove locations that have logged in to have access to your account.  This is a helpful tool that I use.

-Login Approvals:  You can create a more secure logon.  It will also delay your log on.  When you put in your username and password it will bring you to a verification window.  You then will receive a verification code by the means you set up.  While this is a great tool you need to keep in mind the worst case scenarios.  if it is sent via text and you get a new phone and phone number you wont get the code.  Or if you have it sent via email and you are unable to get into that account you will not be able to log in.  This can give you a headache quickly.  You have to find what works for you.

App Passwords:  You can set up passwords for the use with the different apps you use in Facebook.  You can set them to increase security but know that this will decrease the level of connivence of using them.

Recognized Devices:  If you have set up other security features this is where you can see what and who has permission to access your accounts.  You can see names of the devices and the dates they logged into your account.  You can remove devices that were used that maybe you just used one time and do not want to have continued access.

Active Sessions:  Here you can see all the sessions created.  Each time Facebook is accessed with your username and password it is logged here.  So you can see if someone has used your account with out your permission.

Facebook Account Settings (General)

On the main Facebook page where you view your wall at the top right above the adds you will see a down arrow next to the home block.  Click the down arrow and you will see Account Settings.  Click here and we will begin.

So the first selection is General.

-Name: This is where you can change your name.  In a situation where you got married or divorced. 

-Username:  Facebook allows you to select a username that you can use for people to find you better like Facebook.com/noobsec for instance.

-Email: Here is where you can change which email account you would like associated with your account.  You can also set up a Facebook email address as well.

-Password: This is where you can change your password.  It also tells you the last time that you changed your password.

-Network:  Here is where you can add networks

-Linked Accounts:  Here is where you can link another account to your Facebook account.  Be careful here.  If you don’t need to be logged in every time you log into something else then do not set this up.

-Language:  You can change what language Facebook is displayed in.

Facebook INTRO

   Yes, that amazing place where you share, like and post things can be a security problem.  You share lots of personal information.  You share pictures and articles and funny pictures of cats or political opinions.  You add long lost friends and coworkers.  You play games and allow them access to your wall. 

    Do you know what you are sharing and who can see it?  What can they get from these little bits of information?  Well, did you share what high school you went to in your profile?  A quick google search can find out what your mascot was.  And that is one of the top 10 security questions on websites.  As a matter of fact ING uses that question.  Your birthday, your family, your parents, your likes and dislikes.  You can even be sharing your email address and phone number with out even realizing it.  Who can see your wall?  What exactly do you share?  Did you know that sometimes friends of friends can see your post if they are not your friend but the friend you share posted on your post.  That post about how excited you are about your two week cruise to rest and relaxation just told everyone that no one will be home for how long and possibly when you are gone.  I have read articles about people who have been robbed because of such posts.

    If you have your settings so that friends of friends can see when a friend posts or likes one of your photos or vise versa.  Now if you post something personal about a tough time you are going through you are looking for a little support from your friends.  A good friend of yours makes a comment like keep your chin up.  Well that post you made about how sad you are or what not can now be seen by your EX.  Yes, if your settings are set up properly your EX’s can stalk you through mutual friends.  Maybe that post was about the EX.  No its not a huge deal or maybe it is to you.  Remember, nothing you put on the internet is absolutely private.  But you can attempt to make it as private as you can.

    So we are going to be going through the privacy and security settings.  I will show you the features and settings that will make you as secure as you feel that you need to be.