Thursday, 8 August 2019

CyberSafe Alert 2019 Edition 6



Why your ‘personal’ calls are not personal anymore

Welcome to CyberSafe alert 2019 edition 6, where we provide timely actionable insights to individuals and SME’s on how to protect themselves online.

This alert covers the story that’s recently been doing the rounds about Skype calls being legally listened to. If you’ve read the CyberSafe book, then this information will not be news to you, and if you followed the advice in the book, then this is one less cyber security issue that you need to worry yourself with.

So what’s the big issue? According to a story from Motherboard,

Microsoft has people that regularly listen in to calls made on Skype in order to improve their machine learning services, especially around translations. Before you get outraged and start calling your lawyer about this flagrant violation of your privacy, it’s important to note that unless you opted out from this in their terms and conditions, you have agreed that this can be done. Skype is not alone in this. Most if not all of the big, commercial VOIP providers will have clauses in their terms and conditions that allow them to monitor your calls.

Although this alert is focused on the VOIP issue with Skype, I think it’s important to note that if you use a service like Cortana, or Alexa, or Siri, these devices (assuming they are switched on) are listening to your every word, whether it’s a valid command or not.

Regular readers of the Cybersafe Alert will know that we’re not just here to scare you into thinking the sky is falling in by telling you what’s going on, but also to give you actionable advice on what to do. So here’s what to do if you’re concerned about the recent revelations about Skype:
  • Check the T&C’s of the VOIP service that you use. If you are concerned about them listening in, then opt-out. If you can’t opt-out, then switch a different service
  • This kind of monitoring is not unique to Skype. Most if not all of the big commercial services will have a similar capability to listen in to your calls. Cybersafe book readers will know about alternatives such as Silent Phone by Silent Circle. If absolute privacy is important to you, then switch to one of these services
  • This is somewhat counterintuitive in terms of what these tools are supposed to offer, but if you use an IoT device such as Cortana, Alexa, or Siri, keep it switched off until you need to use it. These devices by their very nature need to listen to every word you say, in order to react when you give them a recognised command

Following the advice in CyberSafe should go a long way to keeping you safe online. As we like to say at the CyberSafe alert - Don’t Be Scared; Be Prepared
 
Want a regular briefing about the newest Cyber threats? Subscribe to the Cybersafe Alert now!


https://my.sendinblue.com/users/subscribe/js_id/2kpcr/id/1



If you can't wait for the next CyberSafe Alert to tell you how to protect yourself online, get CyberSafe the book. It's packed with the useful information and strategies you need to keep yourself, your family, and your business safe online.


 http://www.expatpat.com/cybersafe-book



Disclaimer
Every effort has been made to ensure that the content provided in this post is accurate and helpful for our readers. However, this is not an exhaustive treatment of the subjects. No liability is assumed for losses or damages due to the information provided. You are responsible for your own choices, actions, and results.
   

Thursday, 6 June 2019

CyberSafe Alert 2019 Edition 5

Is the new “Sign in with Apple” button a game changer?

 



Hello again, it’s time for the fifth CyberSafe alert edition of 2019. I’m sure you haven’t failed to notice that these days when you sign up or sign into most apps or websites you will have encountered the timesaving social login feature. These time-savers allow you to register for websites and apps using your already existing profiles on social media behemoths like Facebook, Twitter, and LinkedIn by simply clicking on a button, instead of typing in your details all over again.

Great idea right. Well yes if all that matters to you is saving half a minute logging into the site or app. Not such a great idea if you value your data privacy. I have to say, I personally don’t use social logins, and If you’ve read the CyberSafe book

you’ll know that we don’t recommend you do so either. The reason? Although social login provides extra convenience, the cost of that convenience is giving away some of your personal data. Not worried about giving away your email address or username? Well, these social login buttons usually also send additional data like gender, age, relationship status, etc to the sites and apps you register with or log in to.

If you’re a Cybersafe reader, you’re pretty careful about your cyber security, so that’s why Apple’s recent announcement of “Sign-in with Apple” could be a potential game-changer for those that value both convenience AND privacy.

So how is it going to work? “Sign in with Apple” will be in the form of a button similar to the other social login buttons. The difference is, it won’t transmit your personal information. Instead of sending your email address, it will generate a random email address linked to your real address.

So do you need to do anything to get this going? Well no actually. The great thing about this for users (Apple users actually, sorry Android users - at least for now) is that Apple will require apps that include social sign-in buttons to include the new sign in with Apple one as well.

For Android users, although the sign in with Apple button isn’t available, alternative methods of registering with or signing into an app or website other than social logins usually are. If you’re concerned about your privacy, I would recommend setting up a profile manually. It can usually be done relatively quickly, and you can decide what information gets transmitted.

Following the advice in CyberSafe should go a long way to keeping you safe online. As we like to say at the CyberSafe alert - Don’t Be Scared; Be Prepared

Want a regular briefing about the newest Cyber threats? Subscribe to the Cybersafe Alert now!


https://my.sendinblue.com/users/subscribe/js_id/2kpcr/id/1



If you can't wait for the next CyberSafe Alert to tell you how to protect yourself online, get CyberSafe the book. It's packed with the useful information and strategies you need to keep yourself, your family, and your business safe online.


 http://www.expatpat.com/cybersafe-book



Disclaimer
Every effort has been made to ensure that the content provided in this post is accurate and helpful for our readers. However, this is not an exhaustive treatment of the subjects. No liability is assumed for losses or damages due to the information provided. You are responsible for your own choices, actions, and results.

Wednesday, 15 May 2019

CyberSafe Alert 2019 Edition 4






WhatsApp Hacked!? Here's What To Do About It



Welcome to the fourth CyberSafe alert edition of 2019. Usually on the CyberSafe alert we focus on issues that could impact you at any time. Today’s alert concerns the the recent attack on WhatsApp and what to do about it if you have WhatsApp installed.

If you’ve read the CyberSafe book you’ll know that we list WhatsApp as being one of those messaging tools to look at because of its end to end encryption. WhatsApp is one of the most popular messaging apps in the world, and because of this, that makes it a target for hackers targeting its massive user base.


The news filtering in from WhatsApp this week is that hackers were able to install surveillance software on not just phones, but on any other devices you may have installed WhatsApp on. This surveillance software allows hackers to view messages you have sent or received on WhatsApp.


If you’re a Cybersafe reader, you’re pretty careful about your cyber security, so how could you have been caught out right? Well, it turns out there wasn’t a lot you could do about it. The hack worked by using WhatsApp's voice calling function to ring a target's device.

Even if the call was not picked up, the surveillance software could be installed. Just to cover their tracks, the call would often disappear from the device's call log.


Here at the CyberSafe alert, we don’t just give you the news, we also give you solutions to tackle the issues we raise, and this solution is simple. WhatsApp have issued a fix to this problem, but the next bit depends on you. Make sure you update your current version of WhatsApp to the latest version. Yes, stop reading, and DO THIS NOW!


Oh, and one more thing. While the update fixes the flaw that let this attack take place, WhatsApp has not said whether the update removes any spyware that has already infected a compromised device. So, in addition we suggest you also make sure your anti-virus software is up to date, and run a scan for any potential threats. Of course we’re sure you’re already doing this regularly, right? If you’re running WhatsApp on iOS you can feel reasonably secure that any infection is limited to the WhatApp app because of the way apps operate in iOS.


Following the advice inCyberSafe should go a long way to keeping you safe online. As we like to say at the CyberSafe alert - Don’t Be Scared; Be Prepared


Want a regular briefing about the newest Cyber threats? Subscribe to the Cybersafe Alert now!


https://my.sendinblue.com/users/subscribe/js_id/2kpcr/id/1



If you can't wait for the next CyberSafe Alert to tell you how to protect yourself online, get CyberSafe the book. It's packed with the useful information and strategies you need to keep yourself, your family, and your business safe online.


 http://www.expatpat.com/cybersafe-book



Disclaimer
Every effort has been made to ensure that the content provided in this post is accurate and helpful for our readers. However, this is not an exhaustive treatment of the subjects. No liability is assumed for losses or damages due to the information provided. You are responsible for your own choices, actions, and results.