Wednesday, November 28, 2018

Yet another out-of-band Microsoft Windows 10 update November 27, 2018

 Out-of-band updates (not Patch Tuesday) usually imply fixes so dire they can not wait till the normal patch Tuesday update cycle.

 Windows 10 versions prior to the October 2018 update (released November 13 along side of the patch Tuesday updates) have updates available to them today.

 Prior windows 10 updates:
 1607 Anniversary update
 1703 Creators update
 1803 April 2018 update

KB4467682 has a page long list of improvements and fixes.

Wednesday, November 14, 2018

Your information

 Many sites and activities collect information. No fake news there.

 Due to the General Data Protection Regulation (GDPR) the consumer has gained some control and transparency of this information and data.

 Google collects a lot. Spend some time at https://myaccount.google.com to gain insight. Google apps and apps using Google analytics collect information you may or may not see at the Google site.

 Facebook obviously collects all the information you give or post. Facebook also collects information about you supplied by your contacts and friends, the applications and surveys they use, then all their contacts. Use the Your Facebook Information tab on your Facebook page to view the information they provide to account holder's requests.

 Apple recently added the ability to download the information it has collected on your Apple account. Sign in with your apple ID(s) at https://privacy.apple.com/account. The collection and download to the requesting device may take days to compile and complete.

 Another problem/issue is WEB tracking and WEB site analytics.

 Tracking allows sites to "follow" you as you surf using tracking or "third-party" cookies. Most browsers allow user control of these types of cookies. Other blog posts have and will detail more control of tracking.

 Analytics are more troubling to my mind. WEB site analytics allow to collect and reflect back to the sites, any or all user interactions while on the site or any of their child sites. How long it took you to respond to a popup, How long you hovered over a link. Analytics used for good allow the site developer to better tune the site for a better user experience. Analytics used for bad can capture keyboard input like passwords, credit card numbers, then send that information over another encrypted channel to site designed to collect this information, bypassing the encrypted tunnel used by the site visited.

Tuesday, November 13, 2018

Microsoft Windows 10 October update (1809) released today November 13

 The 1809 re-release to occur today November 13. Still called October 2018 update.

 Once you decide is you want the update or want to postpone the update, take the appropriate actions.

Sunday, November 11, 2018

Some reported recent SCAMs

First

This is very clever. `I would probably fall for it if not warned.
Give this wide distribution. This scam is actually very clever. Just
when you thought you'd heard it all. Be very careful out there!
Beware of people gifts.
The following is a recounting of the incident from the victim:
Wednesday a week ago, I had a phone call from someone saying that he
was from some outfit called: "Express Couriers," (The name could be
any courier company). He asked if I was going to be home because
there was a package for me that required a signature.
The caller said that the delivery would arrive at my home in roughly
an hour. Sure enough, about an hour later, a uniformed delivery man
turned up with a beautiful basket of flowers and a bottle of wine. I
was very surprised since there was no special occasion or holiday, and
I certainly didn't expect anything like it. Intrigued, I inquired as
to who the sender was.
The courier replied, "I don't know, I'm only delivering the package."
Apparently, a greeting card was being sent separately. (The card has
never arrived!) There was also a consignment note with the gift.
He then went on to explain that because the gift contained alcohol,
there was a $3.50 "delivery/ verification charge," providing proof
that he had actually delivered the package to an adult (of legal
drinking age), and not just left it on the doorstep where it could be stolen or
taken by anyone, especially a minor.
This sounded logical and I offered to pay him cash. He then said that
the delivery company required payment to be by credit or debit card
only, so that everything is properly accounted for, and this would
help in keeping a legal record of the transaction.
He added, "Couriers don't carry cash to avoid loss or likely targets
for robbery."
My husband, who by this time was standing beside me, pulled out his
credit card, and 'John,' the "delivery man," asked him to swipe the
card on a small mobile card machine with a small screen and keypad.
Frank, my husband, was asked to enter his PIN number and a receipt was
printed out. He was given a copy of the transaction.
The guy said everything was in order, and wished us good day.
To our horrible surprise, between Thursday and the following Monday,
$4,000 had been charged/withdrawn from our credit/debit account at
various ATM machines.
Apparently the "mobile credit card machine," which the deliveryman
carried now had all the info necessary to create a "dummy" card with
all our card details including the PIN number.
Upon finding out about the illegal transactions on our card, we
immediately notified the bank which issued us a new card, and our
credit/debit account was closed.
We also personally went to the Police, where it was confirmed that it
is definitely a scam because several households had been similarly
hit.
WARNING: Be wary of accepting any "surprise gift or package," which
you neither expected nor personally ordered, especially if it involves
any kind of payment as a condition of receiving the gift or package.
Also, never accept anything If you do not personally know or there is
no proper identification of who the sender is.
Above all, the only time you should give out any personal credit/debit
card information is when you yourself initiated the purchase or
transaction!

Second
 This one involves card-less ATMs. Some banks now their customers the ability to use ATMs with a smart phone in addition to the ATM card. Usually preceded by a call from your bank detailing a problem that needs you attention. If you duly provide the account information, the criminals use those bank credentials to log into the bank with your account, add a phone number, then use the card-less ATM access to withdraw funds.

Third
 This was covered in another post. The bank calls, using the Caller ID on your bank card so it will appear to be your bank. Good English and grammar is used. A reported problem, your card was used recently at a remote location. Do you still have possession of your card? You do. Can you verify for the bank the card number?  Can you verify for the bank the expiration date?  The security code? 
 We value you as a customer and will express deliver a replacement card. To process the card the bank needs your account password and/or your PIN. This will save you the valued customer time as your PIN will be preset ready for your use. Again, criminals have all the information they need to withdraw your funds.


 Banks and financial institutions have millions of customers. Anyone who supplies those credentials for you account will fulfill the request. Protect those credentials. For ANY unsolicited request for those credentials, call the bank directly. Do NOT click on a link, do NOT enter info into an unsolicited pop-up or WEB page. Contact the bank at a known good phone number.

Tuesday, November 6, 2018

Your voter Information publicly available

  We got a postal card mailer. No envelope, anyone could read it.
The mailer had our voting record and score   AND the record and score of ALL our neighbors.

 Looking into this, it came as no big surprise that voter registrations, voting records, party declarations (if provided by you), and other details to identify you at the polls. 

 What was a surprise  -  an app for your smart phone that supplies all that information for any/everyone in your contacts lists. The idea being you can then contact those who might not vote and urge them to the polls today.
 OR, just those who've declared to the correct party.

 The app can also supply information on close races, get "badges" for contacting others via the app to vote, and similar.

 All this information is public and obtainable, just not to this level.