Recent News

November 8, 2018 by Joseph Martin

Google is rolling out some important changes that will make it easier for people who use their services to control their data.

They’re starting with their most widely used service, which is search. In the weeks ahead, it will be easier than ever for users to delete their search history, on both PC and Android devices.

The official company announcement reads, in part, as follows:

“Today, we’re making it easier for you to make decisions about your data directly within the Google products you use every day, starting with Search. Without ever leaving Search, you can now review and delete your recent Search activity, get quick access to the most relevant privacy controls in your Google Account, and learn more about how Search works with your data.

For example, to control the ads you see when you search, we give you access to your Ad Settings. Additionally, you can access your Activity Controls to decide what information Google saves to your account and uses to make Search and other Google services faster, smarter, and more useful.”

As things stand now, the only way it’s possible to access this kind of information and see how Google uses your data is by using your Google Account. The coming change makes it substantially easier, and Search is just the tip of the iceberg. Next year, similar changes will be coming to Google Maps, with other services following behind those two.

This is good news, and the early response from privacy advocates has been positive. Of course, the jury will still be out until we see the new implementation in action. However, based on the announcement, these changes represent a big step forward that will put more control in the hands of the individual user. That can’t be seen as anything other than a positive development.

Joseph Martin

President & CEO
I hope you enjoyed this article. My mission is to take your stress away from dealing with IT problems. Call (252) 565-1235 or send me a message at our contact us page if you have a question, comment or want help.

November 8, 2018 by Joseph Martin

Yahoo has the dubious honor of having been on the receiving end of the largest data breach in history. As a consequence, the company has recently agreed to pay $50 million in damages and provide free credit monitoring services to its impacted users.

The company actually suffered a pair of breaches in 2013 and in 2014, although this information was not disclosed by the company until 2016. All of the company’s 3 billion users were impacted, and more than 200 million of them saw losses arising from that breach.

The compromised data included: usernames, email addresses, dates of birth, security questions (and their answers) backup email addresses, and phone numbers exposed.

The particulars of the settlement are as follows:

Yahoo pays $50 million to users whose accounts were compromised

Yahoo pays $35 million in legal fees

People who paid for a $20 or $50 a year for a Yahoo Premium account will be eligible for a 25 percent refund

People who had their email accounts compromised will be compensated $25 per hour for the time they spent handling issues related to the breach. Although in this case, users with documentation will see their compensation limited to a maximum of fifteen hours, while users without documentation will be limited to a maximum of five hours of compensation

Any impacted user can request free credit monitoring, which the company will offer for two years

Verizon, which acquired Yahoo in 2017, will pay for half of the settlement cost. Meanwhile, Altaba (the company that arose from the remainder of the original Yahoo business) will pay the $35 million fine imposed by the US Securities and Exchange Commission for the company’s failure to disclose the breach to its investors.

It’s a landmark case, and once the deal gets final approval, notices will be emailed to affected account holders and published in People and National Geographic magazines.

Joseph Martin

November 7, 2018 by Joseph Martin

Security in the Android ecosystem is awful. There’s just no other word to describe it.

In large part, the blame for that can be placed at the feet of Google. Although they have succeeded in creating a wildly successful platform, their management of OEM devices (in particular, security updates for them) have been virtually nonexistent.

This has led to a situation where many device manufacturers don’t bother to push critical updates at all. It costs money to do so, and until now, there hasn’t been a downside for failing to. That, however, is about to change.

Recently, Google announced some big changes coming to their OEM agreements that would require Android device manufacturers to roll out security updates on a regular basis.

The company offered few details when the announcement was made, but since that time, an unverified copy of the new contract was leaked and obtained by The Verge. It sheds some additional light on what’s coming.

Specifically, the new agreement requires OEMs to regularly schedule updates for any device launched after January 31, 2018 if that device has been activated by more than 100,000 users. OEMs will be required to provide security updates for a minimum of two years.

In addition to that, they must make updates that address security vulnerabilities available to their customers no more than 90 days after the patch is released. Taken together these two pieces of information point to the fact that OEMs will be required to issue quarterly updates to their customers, at a minimum.

It’s a good move and one that’s long overdue. When this new agreement becomes official corporate policy, it will have an almost immediate, profound impact on security in the Android ecosystem. While it’s far from a perfect solution, it represents a very good beginning.

Joseph Martin

November 7, 2018 by Joseph Martin

As far as hackers are concerned, no target is safe. Not even the Girl Scouts.

Recently, one of the Girl Scouts’ official email accounts was accessed by an “unauthorized third party” and as a result, as many as 2,800 girl scouts in Orange County, California may have had their personal information compromised.

Gaining access to the account naturally gave the hacker access to every email sent from that account that had not already been deleted. When the breach was discovered, the Girl Scouts sent an email to every potentially impacted individual.

The email reads, in part, as follows:

“Some of the emails stored in this account, which included emails with dates as far back as 2014 through October 1, 2018, contained information about our members. Out of an abundance of caution, we are notifying everyone whose information was in this email account.”

Based on the information the account contained, compromised data varied widely from one person to the next. However, the data included details like email address, home address, health history information, insurance policy numbers and driver’s license details. In short, that’s more than enough information to steal an identity.

While this breach is not noteworthy for its scope and scale, it has been attracting a great deal of attention because it targeted children and young adults. Identity data belonging to this demographic is extremely attractive to hackers because it can often be monetized for months, if not years before red flags are raised.

Last year, more than a million children in the US were impacted by identity fraud. What’s worse, according to a report published by Javelin Strategy and Research, 60 percent of child identity fraud victims know the fraudster, compared with just 7 percent of adult victims.

The investigation is still ongoing, but if you live in Orange County, California, and have a child in the Girl Scouts, be on high alert.

Joseph Martin

November 7, 2018 by Joseph Martin

IBM has recently announced what is to be the largest open source acquisition in history. They’re buying Red Hat for a staggering $34 billion dollars. This, as the saying goes, changes everything.

IBM has lagged behind its competitors for years in the area of cloud computing. When the ink dries on this deal, they’ll move from a virtual non-entity in the market to the world’s #1 hybrid cloud provider.

If you’re a Red Hat supporter, don’t worry that the company is going away. The company is to retain its independence. Rather than being rolled into the corporate structure of IBM, it will be run as a distinct entity and will continue to be led by Red Hat’s current CEO, Jim Whitehurst. Red Hat’s headquarters, facilities and their corporate culture will all remain intact.

Whitehurst himself had this to say about the announcement:

“…Importantly, Red Hat is still Red Hat. When the transaction closes, as I noted above, we will be a distinct unit within IBM, and I will report directly to IBM CEO Ginni Rometty. Our unwavering commitment to open source innovation remains unchanged.

The independence IBM has committed to will allow Red Hat to continue building the broad ecosystem that enables customer choice and has been integral to open source’s success in the enterprise.”

At this point, most of the hurdles standing in the way of the acquisition have been cleared. All that remains is gaining Red Hat shareholder and regulatory approval, both of which are deemed likely. Assuming there are no unexpected wrinkles in the plan, the deal is expected to be finalized sometime during the second half of 2019.

IBM has long supported Linux and other open source initiatives, and this deal is unlikely to change that. That is one of the reasons the proposed deal is unlikely to meet much resistance from either Red Hat’s shareholders or governmental regulatory agencies.

Joseph Martin

November 6, 2018 by Joseph Martin

McAfee has long been a popular target of scammers, but recently, they’ve changed the nature of their game.

In years past, they’d display a webpage informing you that any McAfee products on your computer are out of date and provide a link to the company’s virtual storefront where you could renew.

Unbeknownst to the people clicking on those links, they were being redirected by an affiliate link, so any purchases made would generate a commission for the site owners.

It was an unscrupulous, underhanded tactic, but not an especially malicious one. Now though, they’re doing something a bit different and darker.

The same page pops up as before, notifying users that their products are out of date. This time, when a user clicks to renew their products, instead of being sent to the McAfee website, they’re simply presented with a capture box that asks for their credit card and personal information.

Assuming you enter that information in, it gets worse.

After “paying” for your purchase, you’re redirected to another webpage with a technical support phone number. The idea is, you call this number and the technician on the other end of the line will help you install your new software.

When you get someone on the phone, the “tech support representative” will ask to remotely connect to your computer.

Once they have access, they’ll tell you that your credit card information didn’t go through, and that you need to purchase the software again. They’d then helpfully open a browser and guide you to the McAfee website, via an affiliate link.

It’s a triple play. Not only are they earning a nice commission when you purchase the software via their affiliate link, but they also manage to get your credit card and personal information. That information will no doubt be put to use not long after you hang up the phone, and on top of that, they’ve got access to your device.

As ever, the best defense against scams like these is vigilance.

Joseph Martin

October 29, 2018 by Joseph Martin

Move over Facebook. Where teens are concerned, Instagram reigns supreme, according to a recently published survey.

Piper Jaffray has been tracking how teenagers use the internet for nearly twenty years, and the second report of this year has some interesting findings indeed.

Here are the highlights:

85 percent of teens report using Instagram at least once a month, up from 79 percent in the fall of 2016.

84 percent of teens report using Snapchat at least once a month, up from 80 percent in the fall of 2016.

Just 36 percent of teens report using Facebook at least once a month, down from 52 percent in the fall of 2016.

In terms of their favorite social media platforms, here’s how things look as of this year:

Snapchat in first place with 46 percent

Instagram in second place with 32 percent

Twitter a distant third with six percent

Facebook fourth with just five percent

Interestingly, more teens still use Instagram, but the survey revealed that when the teens were asked which platform they prefer, Snapchat still wins the day.

The survey revealed the reason behind the seeming disconnect. Instagram is the social media channel of choice when it comes to brand engagement of teens, with an overwhelming majority of teens preferring to be contacted by brands via Instagram.

It should be noted, however, that Snapchat is improving in this regard, but industry insiders are doubtful that Snapchat will be able to overcome Instagram’s dominance in brand engagement. This is because Instagram has been focusing heavily on improving engagement with the youngest cohort of the teen set.

Unless the company makes a major misstep in handling that segment of the demographic, they’re unlikely to lose them in the longer term. Meanwhile, Facebook has become the bastion of older users. Mom and dad check their Facebook accounts. Teens check Instagram.

If your business markets products to teens, this is good information to know. If you don’t have a robust presence on Instagram, then your social media isn’t doing as much for you as it could be.

Joseph Martin

October 27, 2018 by Joseph Martin

You probably haven’t heard of the Centers for Medicare and Medicaid Systems.

They’re a low-profile division of the Department of Health and Human Services responsible for administering the Affordable Care Act.

Recently, the company announced that they detected anomalous activity in the systems related to the healthcare.gov website that brokers and insurance agents use to assist people who apply for healthcare coverage.

The abnormal activity was detected in the Federally Facilitated Exchange system, and the direct enrollment pathway in particular. This is connected to (but separate from) the healthcare.gov website itself.

A statement issued by the Centers for Medicare and Medicaid Systems said:

“At this time, we believe that approximately 75,000 individuals’ files were accessed. While this is a small fraction of the consumer records present on the FFE, any breach of our system is unacceptable… We will continue to work around the clock to help those potentially impacted and ensure the protection of consumer information.”

CMS made it clear that their investigation into the matter was still in its earliest stages.

They did offer the following additional information:

“Upon verification of the breach, CMS took immediate steps to secure the system and consumer information, further investigate the incident, and subsequently notify federal law enforcement. We are actively engaged in and committed to helping those potentially impacted as well as ensuring the protection of consumer information.”

Additionally, CMS stated that they identified the broker accounts that were associated with the anomalous activity and deactivated them out of an abundance of caution.

At some point in the near future, we can expect that CMS will be contacting those whose data was compromised and providing them with a series of next steps. The agency is already moving to bolster their security measures and promises that they’ll have them in place before the end of October 2018.

If you’ve used the healthcare.gov portal and required the assistance of a broker or insurance agent to get coverage for yourself and your family, there is a small chance your data may have been compromised. However, at this point, there’s no way to be certain. Be on the lookout for a communication from CMS in the near future, however, just in case.

Joseph Martin

October 26, 2018 by Joseph Martin

Microsoft hasn’t been terribly impressive lately when it comes to Windows 10 updates. In fact, it’s fair to say that they’ve been a complete mess. Just recently, they’ve issued updates that have deleted user files and caused crashes after creating incompatibilities with keyboard drivers. Now, (courtesy of the most recent Windows 10 update), many users are reporting that they’ve got no sound due to corrupted or incompatible audio drivers.

The company has made hasty corrections to their previously botched updates and patches, but as yet, there has been no official word from the company about a fix for the audio driver issue. The legions of Windows 10 users aren’t happy about it, and are taking to social media to express their displeasure.

All over Reddit and Twitter, dissatisfied Windows 10 users are up in arms about the string of shoddy updates that have created more problems than they have solved.

Since Microsoft hasn’t released a fix for the latest debacle, the company’s massive user base has begun investigating and have come up with a workaround.

In a nutshell, if you’ve installed the latest Windows 10 update and lost your audio as a result, go into your device manager and look for an audio driver that has “SST” as part of the name. If you find one on the list, right click that device and select “Update Driver.” Once the driver has been updated (which may require a system restart), your audio functionality should be restored.

As mentioned at the start, this isn’t the first time the company has issued a botched update, and the problems only appear to be getting worse over time. It seems clear at this point that Microsoft doesn’t have enough support staff to identify and prioritize bugs reported by their army of beta testers. Until that changes, we can expect issues like this to continue.

Joseph Martin

October 25, 2018 by Joseph Martin

Google is taking additional steps to bolster user privacy and better secure the data of the company’s legions of Android device owners. The company recently announced a change to the Android Backup Service that will encrypt all user backup data stored on its cloud servers, such that even Google itself can’t read it.

Google has long allowed Android users to back up their app data and phone settings to their Google account so when they upgrade their phones, the process of getting the new device set up is quick and painless. However, until this recent change, none of the backup data stored was encrypted.

Beginning with Android Pie, the new encryption paradigm will work as follows:

Your Android device will generate a random security key that is unknown and invisible to Google

The key will be encrypted using your passcode, pattern, or lock screen PIN

Once encrypted, the key will be sent (securely) to a Titan security chip on Google’s servers

As Google explained in a recent blog post: “The Titan chip is configured to only release the backup decryption key when presented with a correct claim derived from the user’s passcode.”

All that sounds good in theory, but what about brute force hacking attempts? The company has an answer for that as well.

Here’s what they had to say about that topic:

“The limited number of incorrect attempts is strictly enforced by a custom Titan firmware that cannot be updated without erasing the contents of the chip…by design, this means that no one (including Google) can access a user’s backed-up application data without specifically knowing their passcode.”

The company has not specified which Android smartphones will be able to take advantage of the additional layer of security. All we know at this point is that the device must be running the latest OS (Android 9 – Pie). We expect to get a comprehensive device list from Google in the near future.

Joseph Martin

Contact Info

Navigation