Cybersecurity & Privacy
Microsoft takes aim at Google Chrome vulnerabilities
July 2014, Google launched it's project zero initiative to identify Zero-Day vulnerabilities in commercial software thus making computing generally more secure. Google's modus operandi is to inform affected vendors and give them 60 days to release patches. After the 60 day window, they go public even if a patch is not yet available. “Our standing recommendation is that companies should fix critical vulnerabilities within 60 days — or, if a fix is not possible, they should notify the public about the risk and offer workarounds.
Chrome for Windows helps recover your browser from hijacking
Google Chrome, Microsoft Edge, and Mozilla Firefox are all mainstream browsers that work extra hard to keep you safe in cyberspace. Each company has taken a different approach, but users are more protected than ever before. Nothing is foolproof though. What happens when badware gets through those defences and takes over your browser making your leisurely stroll through cyberspace painfully slow or dangerous by stealing your passwords? In the latest version of Chrome for Windows, Google adds more tools to the arsenal.
You're going to love the DuckDuckGo Terms of Service
Terms of service are professionally written notices you agree to every time you use a new smartphone, install a new software or sign up for a new web service. Consumers are rightfully annoyed by 50+ page terms used by large companies. Sometimes, you stumble on a company that has "good" terms of service in that they actually protect you (the consumer). This write up is about DuckDuckGo because I receive several dozen emails from readers every month asking if they really are a good alternative (from a security perspective to use).
Skimmer Scanner app for android
Real security requires vigilance, even for consumers. One issue we have been hearing a lot over the last couple of years is credit/debit card skimmers. A skimmer is a cheap hardware device that blends into the credit/debit card processing machine of a retailer. When processing your transaction, the skimmer copies your card information and somehow makes it available to the "bad" guys. An open-source Android app, called Skimmer Scanner, is promising to help consumers win this battle. The company behind this project, SparkFun, explains why thieves love gas stations.
Honest review of the Tunnelbear VPN service
Similar Articles: Review of Private Internet Access (PIA) KeepSolid VPN Unlimited Review Your ISP is always watching, tracking and profiling you Honest review of the ProtonVPN service Beware of the fake VPN providers What is Tor and should I use it Review of HideMyAss VPN (HMA) Start I've written about half a dozen articles over the last couple of weeks reviewing various VPN services. I asked my social media followers what other VPN services they wanted me to review, and many readers requested that I review TunnelBear.
Install IOS Update 10.3.3
As mentioned in my various articles, keeping your operating system and applications updates is a critical component to good overall security. Apple released IOS 10.3.3 yesterday, and amongst all of the bugs it fixes, there is one nasty security vulnerability that justifies installing it now. Right now. Do it. I'll wait. Come on, we don't have all day. Put Apple's banal sounding description aside for a second ("A memory corruption issue was addressed with improved memory handling".) This vulnerability comes from the Broadcom BCM43xx wifi chipset (CVE-2017-9417) and allows an attacker to execute code on the targeted device with kernel privileges.
Review of HideMyAss VPN (HMA)
After writing my first VPN service review a couple of weeks ago, I asked my readers "what other VPN services" I should evaluate. A much-requested one was HideMyAss (HMA), so here is that review. You can't evaluate VPN service providers without seeing HideMyAss. They have ads everywhere. My first experience with HMA was through a 1-month free offer provided by Anonabox. Most security blogs and posts on review sites give HideMyAss a poor rating because they have (allegedly) turned over user log information to authorities (without putting up a fight).
Review of Private Internet Access (PIA)
The question I receive the most is "what VPN service should I use when I travel?". I started writing and testing the most popular ones and so far you can read these ones: Honest review of the ProtonVPN service Beware of the fake VPN provides KeepSolid VPN Unlimited Review VyprVPN Review The next most requested service is Private Internet Access (referred to online as PIA). Introduction Private Internet Access (PIA) is one of the most popular and affordable VPN service providers around.
Honest review of the ProtonVPN service
UPDATE 7/5/2017: My connection to the ProtonVPN endpoints using their Windows client is extremely unreliable. At random intervals, the connection just "stops working" and the only way to fix it is to connect to a new location. I have had a support request open for over 1.5 weeks and my issue hasn't been resolved yet. I cannot recommend the ProtonVPN service at this time for the reasons listed below and because my experience has been unstable (and support has been slow to non-existent).
Beware of the fake VPN provides
I've written 2 reviews for VPN Services recently: VyprVPN Review KeepSolid VPN Unlimited Review I've also written 2 reviews for WIFI VPN/TOR portable boxes: Anonabox Review Invizbox Go Review One item I have never covered is the proliferation of scammy VPN services sold by snake oil salesmen. With the Edward Snowden leaks and all the media coverage about the loss of online privacy, even the most complacent internet netizens are starting to think about securing their online presence. Protecting it not only from government agencies but from unscrupulous websites and even their own ISP (Your ISP is watching you).