Software and Tools - Social

A large part of people being online is the various 'social' applications.  For myself the major ones I use is Twitter and Facebook.  There are others, but, the basics I will cover here should be applicable to the other sites/applications.  I use Twitter mainly to quickly comment and notify about various events and information that I find of use.  I have the account linked to my Facebook so that my friends and family can get the information at the same time.  I like Twitter as it is small enough for my low end smart phone to run without a problem.  Facebook to be blunt, is a pig on resources and when I did have it running on my phone it would take 5-10 seconds at times to do a simple action like posting an update.  Facebook runs well on my tablet and my laptop and that is the main way I socialize electronically with friends and family.  I use both to supplement my contacting friends and family and it does not replace face-2-face.  I like them both as I can quickly set up photo albums of events and quickly share them for those who could not make it to the event.

One of the first things you should do when joining is to read the terms and service.  I know they are extremely long, boring and full of legalese, but, you should be aware of the basics just-in-case there is a problem in the future.

Settings

Next up is to check the settings, especially the privacy settings to make sure you share only what you are comfortable with and turn off the rest.

Facebook Android Client Settings

Facebook Android Client Privacy Settings

Twitter Android Client Settings

Twitter Windows 10 Client Settings

Facebook Windows 10 Client Settings

As you can see above the applications have a similar look-and-feel and the web browser rendering looks very similar.  Take 15-30 minutes and navigate through the various settings and read up on what they do and then set your account to what you want people to know about you and the marketing firms gets to see.

Once you are set up then you can think about what to post.  What ever you post always assume that your employer can see all your postings so exercise some prudence on what you post!  You may have your account locked down so that only friends and family can see what you put up, but, if they re-post or share and they don't exercise good judgement on their privacy settings they can expose what you put up.  I have seen people put up photos of events that to put it kindly was less than a positive image they wanted to project socially and professionally.  When in doubt ask yourself - what would mom think if she sees it?

Security

On the security side of things be careful on what links you click, especially in Facebook.  I have noticed a large increase in what is claimed to be news (or at least what people want to you think is news), but, is at best clickbait or trolling and at worst a link to sites that may contain scripts that can infect your machine.  Best thing I can say is to exercise caution with links to news.  If the articles come from friends and family still exercise caution, but, if it is a promoted article then be very suspicious.  Most of the clickbait sites are there to make money by showing you a lot of ads and the content at best is misleading.  For the fake news sites they tend to show to people articles written in a way to inflame them (or troll them).  Personally when I get unsolicited 'ads' I click the drop down and pick the option telling Twitter/Facebook that they are not interesting.  Before I re-post a tweet or a Facebook news story I check out the article and review it.  If it is clickbait, inflammatory or misleading I just ignore it and not give them additional views by re-posting.

When I am done with my session in Twitter and/or Facebook I log out of the account.  It is a bit of a pain, but, if for some reason some gets access to my phone, tablet of PC they don't get easy access to my accounts.  When I leave the machine I also lock it!  It takes only a few seconds to unlock the machine and then log back in, but, if someone gets access to that device they can destroy my account and credibility in a few seconds.

Another thing I strongly recommend is a good anti-virus package.  It may not stop 100% of the nasty virus/Trojans out there, but, it is another layer of defense to make it harder to get access to your device.  You can read my short blog on this topic to give you an idea of what is out there.

Adding friends/family/businesses

One of the other things I am very careful of is adding people to Twitter or Facebook when I get a request.  It does not matter who it is doing the request!  All friends/family get vetted as to who they are before I add them.  I have received requests from people claiming to be a friend or family, but, when I check with the person directly I find out they didn't make the request.  When that happens I have the friend or family member report it to Twitter or Facebook and I do the same.  On Twitter I regularly get requests to add people and I  review them very carefully before I add them.  For a while the requests were from very questionable accounts and the content and images were not the type I wanted associated with my account.  In the past several months I think Twitter has gotten better nuking the accounts quickly as it is a very rare event when I get such a questionable request.  Every couple of weeks I review who I have linked to and those who link to me and verify that the accounts are still legit and the content is what I want associated with me.  I have found that some Twitter accounts looks legit for a month or two and then the true nature shows itself.

Images

On uploading images I try to be careful of what is uploaded, especially when someone tells me they don't want a particular photo posted.  I also resize the image to around 1024x768 or 2048x1536.  Not everyone has high speed internet and at those resolutions the image is still good enough and is small enough for them to download quickly.  I keep the originals on my machine so if they want the original image I can send them that when requested.

Backups:

Twitter does have the ability to backup your posts.  The link on how to do that is here.  Facebook has a similar facility and the link on how to do that is here.  I strongly recommend that you do this now and then.  If for any reason you lose access to your account you have a backup.  When you backup your accounts you may also want to think about how to backup your phone/tablet/PC at the same time.  Machines do fail and I remember a person calling me to see if I restore their hard drive.  They had thousands of images and a lot of the pictures of their children when they were small was on the failed drive and they had NO backups.  I couldn't restore a lot of images, but, I could restore several thousand images.  They now have an external USB drive they backup their files to on a semi-regular basis now.  External USB hard drives are fairly inexpensive and capacities are in the multi-terabyte range now. 

Possible ad-malware attempt

For the last several days my Android tablet was opening windows at random.  At first I thought it was me, but, yesterday the following happened and the tablet was sitting on the table untouched:

• Multiple search windows open;
• Over 12 tabs opened in the browser going to a number of sites with the same prefix.  I won't name it as I don't want them to get the ad revenue;
• My BANKING app was opened up.  I don't have auto-sign-in there so no damage done.  I checked the bank account from my Linux machine and no activity to my account (yay!);
• Multiple apps opened up.  Again these had ads so I suspect they were trying to maximize their ad revenues.  Either that or they wanted someone to pay a lot of ad money for spam clicks;

I know what the last app I installed so I suspected that app as they are ad supported.  After I removed the app and let the machine sit for 24 hours I had no more random windows opened so I may have guessed correctly.

I also run AVAST on the machine and I scanned everything and it was clean.  I know if it is very new the scanner may not detect it, but, I wanted to make as sure as possible I wasn't infected with a known virus.

I also sent Google a feedback that the app may have ad-malware and see if there is anything that they could see and do.  May not be much, but, at least I wanted to make them aware of the issue.

My guess for next gen malware encryption

I am going to make a bet that the next generation of file encryption malware is going to be a lost nastier.  Your best defence is:

• Backups.  Keep multiple backups and not connected to any network after your backups are done.  Don't just do backups, test them!  Too many times someone approaches me saying they need help as they tried to restore files from backups and they don't work;
• Up-to-date software.  When patches comes out for your operating system and applications install them ASAP.  Most of the time those patches are due to holes and the hackers are already using them.  It does not matter what O/S you use, Windows, Linux, OS/X all need to be up-to-date;
• Home routers.  Keep them up-to-date also.  Sometimes your ISP will patch their routers, ASK them to keep their hardware up-to-date;
• Good anti-virus software and keep them up-to-date;
• Do and not opening up attachments from emails that you didn't ask for is also a good step;
• Good web surfing habits.  Sometimes a site will pop-up 'You need to update or install this program to view'.  Don't trust any site doing this.  Most of the time it is for Flash and people think 'Oh, I am out-of-date again' and click install.  NEVER DO THAT, go directly to the source of the program and check.  If it is out-of-date install from the maker directly and not from a web site.

Unfortunately the writers of these nasty programs won't stop there.  They have been using ad-malware and then getting into legit sites serving ads and try to infect you when you view their "ads" and try to bypass asking your permission to install.

Right now when your system is infected and your files are encrypted some people recommended to turn back the system clock so time does not expire. Right now that works, but, I suspect not for very long.  The writers of these programs know that "trick" and I suspect they are working on how to counter that.  I see them saving the system clock information and the network time information at time of infection.  With that they know exactly when they installed on your system.  They also can determine the basic time differential between your system and the network.  If they then compare that information the next time it runs the program may just nuke your files if the date on system clock is less than their time-stamp.  Also, if they are really nasty they will also nuke the files if they cannot make a connection to the network to verify the time.  When they can make a connection they will use the time differential to see if you played with the system clock.  I would also be willing to bet that they will advertise what they did and why so that fact will spread around that playing with your system clock or unplugging from the network will nuke your files.  I don't know if (or when) that will happen, but, it will make your backups much more important as the only way to restore your system is to do a total wipe and restore.

Telemarketing Scammers

Not a linux or PC topic, but, I have been getting a lot of telemarketing companies calling me.  Since I am on the DNCL (Do Not Call list)  I keep telling the telemarketer to add me to their do-not-call list.  Obviously they are scammers and don't add me to their list and continue calling me.  I do a little bit of homework looking up their calls and when I see where they are from it is almost obvious they are forging the caller id information.  Several of the calls came from out west and the location has at most 100 houses and not a call center.  I keep filling in the complaint form on the DNCL web site, but, since caller id is forged it is an exercise in futility.  The last call came from 999-910-0221.  If you know anything about area codes then you know that 999 is an impossible value.  I found a spot on the CRTC web site and I filled in a question on why they have not launched an effort to stop caller id forging.

It is at the point now that I cannot trust the caller id information until I hear the voice on the other end.  If it is a co-worker, family or friend then it is not a problem.  For not-for-profits I keep telling them to send me a pledge form in the mail as I cannot trust caller id anymore and just because the name/number shown is for the charity I cannot believe that!  I never give out my credit card information to anyone over the telephone.

If you are in Canada I would suggest that you send the CRTC a short note requesting that they start a discussion with the telephone companies about this problem.  We are paying for a service, but, cannot trust it as scammers/spammers have hijacked the system and are forging telephone numbers that show on the caller id.  If you are in the USA You may want to check the FTC to see what can be done there.

SPAM - Unfortunately it is making a comeback

It has been a while since I talked about spam. The last time I noted that the amount was dropping and most of my email were legit. Well that has changed in the last two months. I have noticed that the volume of spam is now rising and most of my email is now spam. Yahoo has excellent filters, but, I have been getting at least one message a week getting through so the spammers are now figuring out how to get past the filters. Google is still good as I don't remember getting anything that was spam in my legit inbox, but, I notice there are a lot more spam messages. The last provider is Bell and I am getting about 1 or 2 emails a month that get through, but, I flag them as spam so that Bell can update their filters.

This will be a continuing battle between ISPs and the spammers. The thing is that the ISPs can only react most of the time after the fact so there is always a small window of opportunity for spammers to hit your inbox. You can help by using the email filters that your ISP provides and when one does get through flag it so that they can update the filters. When you do get a message don't click on the 'unsubscribe' button if it is provided or don't reply to their 'unsubscribe' email address if provided. All you do is confirm that your account is live and we can almost guarantee that you will actually receive more spam rather than less.

I may be paranoid, but, keep your anti-virus, anti-spyware and firewall up-to-date. These spammers may also try to embed scripts or auto-launch programs that will install software on your machine and take it over and add it to their bot network.

You can look at ClamAV, Malwarebytes anti-malware as a starting point for your securing your systems. Secunia also has a good package called PSI that will scan your system to see what is out-of-date, vulnerable, etc and allow you to keep your system-up-to-date. I use these on my home PC when I start up the dual-boot system to run Vista and not Linux.

Update (2009/09/22):

I am now running AVG on my Vista partition.  It seems to do a bit better on the detection of malware and does not impact the performance of the machine in any noticeable way.  I will be still keeping Clam on the Linux portion as I can then use that to scan my external HDD or USB sticks while staying in Linux.

New Phishing scam - CRA

Earlier this week I got a mail from what purported to be the CRA (Canada Revenue Agency). Looking at the email I saw a grammar error and the way the email was addressed made it look like a scam. My ISP also flagged it as a possible scam. I didn't click on the attached link, but, put my mouse over it to see what the link would resolve to. The proper URL for the CRA is WWW.CRA-ARC.GC.CA. This one had that and a bit more, namely the URL went to a '.COM' site. As this was a new scam to me I forwarded the note to RECOL and reported it as a scam/phishing attempt.

It failed on a few areas:

• Subject was 'recalculation of you tax refund'. They used 'you' instead of 'your'
• It was addressed to 'Dear Applicant' rather than my proper name.
• The URL provided did not end in GC.CA, but, to a COM site which the Government of Canada does not use.
• I had already got my tax refund and I know that the CRA does not have my main email address for correspondence as I prefer hard-copy rather than email from them.
  

When I got home I opened the site using Linux as it was fairly safe from trojans and viruses. It asked the following questions:

• Name and Adress
  
• Date of Birth
  
• Mother's maiden name
• Phone number
• email address
  

One of the first things firefox did was to warn me that this was a site reported for web forgery. If you don't have firefox I would advise you to download and install this browser ASAP as it is a second level of defense.

Again, if you get an email that claims to be from the government, bank, insurance company or anyone else asking you to key in personal information do not ever use the attached URL, go to their site yourself (using a link you know is legit).

It has been quiet... too quiet

Not much has been happening here. It is now almost tax time and there are no Linux versions of any tax preparation software for Canada so far. I broke down and picked up QuickTax and installed it on my Vista partition. To say that I am unhappy about this would be a slight understatement. I can understand in a way that companies will cater to the largest segment of the O/S market, but, figure out what has to be anchored to the O/S and what can be independent. If you do that you should be able to market to Linux, OS/X along with Windows and gain a slight competitive advantage by grabbing market share from those of us who use anything but Windows.

On the Linux Distro side I have been playing a bit with KUbuntu. I like the look and feel of it and the latest distro actually booted up on my Dell box. There will be a bit more playing around here to see if

• Runescape will play
• My graphic card can be used to its fullest
  
• TV tuner
• my Palm will work
• Scanner will work (XSANE)
• Web Camera
• Software to organize my photo library
  

KDE 4 looks nice and clean, but, I want more than eye-candy, I want all of my hardware to work to its fullest.

Another little thing and maybe someone out there can point me to the right place. A little while ago I was the photographer at my daughter in-law's baby shower and I took two videos. The camera stored it in AVI format. Linux does not have a problem showing me those, but, they are massive files and I cannot upload 200+ meg videos to facebook to share with the family. I looked quickly at the video editing software, but, I cannot see how I can redo AVI to MPG format and lower the size of the video. I don't want or need 640x480 to show family members some of the funny portions of the part, I just want to be able to share a small, easily downloaded video.

Now about one of my favorite topics, SPAM email. So far this year it has been a minor problem unlike other years (less than 30% spam rate now). However I have noticed the scams have been getting much better. Both for grammar and spelling. When you get a notice that purports to be from your Bank, Insurance Company, ISP wanting private information or to re-enter your security information... DON'T. Never click on any link supplied, but, use the one you type directly into a browser or saved previously in a bookmark. Keep your system up-to-date with all patches, run a virus scanner and have a firewall installed and running.

Year end 2008

It is now the last day of 2008 and it has been some time since I talked about spam. This year marked a real drop in the number of spam messages that I have been tracking in Yahoo, but, all my other accounts now get regular spam emails. The troubling part is that they are looking much better that a few years ago and it appears that the spammers are targeting a more select group rather than doing a blanket spam.

Since I started tracking spam mail in June 2005 I have now received a total of 17,579 emails of which 11,589 were spam. That leaves me with 5,990 (34%) of the mails were legit that I asked for. The upside is that this year 69% of my mail was legit (1,529 emails).

A few things that I keep telling everyone and bears repeating here:

1. If you get mail that purports to be from anyone asking you to re-enter or reverify your account information never click on the link provided. Go directly to their site yourself and check there.
2. Keep your firewall up-to-date and active. If you don't have a firewall get one and install it. There are a number of good free firewall packages out there.
   
3. Keep your anti-virus up-to-date and active. Again, if you don't have this software get one and install it. Like #2 there are a number of excellent packages out there for free that you can download.
   
4. Keep your Operating System (O/S) up-to-date and apply all patches immediately. It does not matter what O/S you run, keep your system up-to-date.
   
5. Keep a good set of backups. Even if you follow #2-4 hardware does fail at times and having a good current backup will go a long way to restoring all of your critical files.
6. If you get an email that sounds to good to be true... it probably is.
7. Never open up file attachments that you don't know who the sender is. Even if you know the sender, check the file first with a current virus scanner and then check with the person before trying to open the file. You are not paranoid, just prudent if you check before doing anything with that file.
8. Enable viewing of the extension of the file name. Some of the nasty packages are really '.EXE', but, shows '.ZIP' at the end of the name hoping to trick you into trying to open the package.
9. Change your passwords on a regular basis. Some people use passwords that have never changed in years, use post-it notes with the account and password or make an easily guessed password. You can make passwords that are hard to guess, but, easily remembered. If a cracker can guess your account password then they can use your identity for whatever purposes they want.
   

Another scam/spam

My wife received an email last week that purported to be from United Airlines. Even though we run Linux she didn't want to open it up until I had a chance to check it out.

The subject line was [Your Online Flight Ticket N 24097] and the contents of the message was as follows:

Good day,
Thank you for using our new service "Buy airplane ticket Online" on our website.
Your account has been created:

Your login: **Removed**
Your password: **removed**

Your credit card has been charged for $947.90.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!

Kind regards,
United Airlines

The first thing I did was to check our credit card to make sure that we were not the victims of identity theft, fortunately we are not. I then checked the file attachment and it showed 'E-ticket.zip.exe'. I checked out via Google about this and found out that there is a scam for the last year with variants on the subject for other airlines. Fortunately we don't use windows so we are fairly safe from the payload. I forwared a note to United Airlines and to quote their reply:

Mr. Traynor, please know that the e-mail you have received is not legitimate as it is not sent by United Airlines.  I would request you to not to open any attachment and provide any personal information.  Rest assured that I have forwarded your concern to our Fraud Investigation Department for their review and investigation.

We truly value your business and always look forward to serving you again

Just a heads up for everyone when you receive something like this not to open the attached file if you are not sure that you are the correct recipient. I would assume that the people behind this are hoping that people are curious enough to open the package and then take over their machines. I also like the fact that United Airlines replied so quickly that the email was not legit and forwarded a copy to their fraud department.

---

Update - 2008/12/15

CERT has a security notice about this, you can learn more about this scam by clicking on airline ticket email scam.