John is worried about security on his new Windows laptop. Leo says to follow the archonym "UPDATE":
security and privacy
Patrick hears Leo talk about Lastpass a lot, but he wants to know if Apple's password vault is secure. Leo says that Apple uses Keychain and it's very secure. It only works on Apple devices, though. And with iOS12, Keychain does autofill.
(Disclaimer: Lastpass is a sponsor)
Dale is worried that his older iPad isn't safe to use anymore since he's stuck at iOS 11. Leo says not to worry. The iPad is secure no matter the age. It's sandboxed and as long as Apple continues security updates, which it will, it's more secure than a desktop.
Researchers have figured out that if you connect your iPhone to a computer, you can keep doing a brute force password attack to unlock it and that it should take about a day to open it. Leo says that this is with a four digit passcode, and a six digit passcode is a lot harder to crack.
The Supreme Court has also ruled that law enforcement cannot get cell phone location data without a warrant. The decision said that day to day movement data on a mobile device provides an intimate look at someone's activities, even to the point of violating privacy without a warrant.
Ron has messed up his Outlook. Now he can't see any images in the body of the email, and it won't download any graphics. Leo says that's a good thing! Outlook disables downloading jpgs by default because they can be hacked to include malware. That's called HTML email and it's a bad idea. So he'd have to opt-in to enable it, but Leo wouldn't. Plain text emails are always best. But if he really wants to, he can go into the Trust Center and change the settings.
Taylor is talking about using LastPass and its 2-factor authentication. How does that work? Leo says that 2-factor can be a biometric thing, like his thumbprint, or it can be an authenticator which will text him a code to his phone that he would input into the prompt. It's secret and only good for about 30 seconds before he would have to input a new code. It's a great way to protect online data.
Charmaine wants to know if she can plug Amazon Echo into a surge protector. Leo says of course! Charmaine also worries that it's always listening. Leo says it is, but it doesn't actively listen unless she says one of four words: Amazon, Echo, Alexa, or Computer. It's only listening for those words. Once it hears the wake word, then it turns on the microphone and sends her request.
Jeff is getting strange random key strokes appearing in his browser bar. Leo says to try a different browser. Windows comes with both Edge and Internet Explorer. If it happens in both browsers, it could be a failing keyboard. Jeff should unplug his keyboard and try a new one. If he still has the issue, then it's a Windows problem, which could be malware or a browser hijack. He could try resetting his browser first. If that solves the problem, then he's fine. If not, then it may be that he'll need to reinstall Windows from a known good source.
Alan wants to know if an antivirus utility is any good anymore for malware. How about on a mobile device? Leo says that all too often, an antivirus leaves people more vulnerable because most malware is a zero day exploit. Antivirus can't stop users from themselves, either. All antivirus utilities have to hook themselves into the OS at a very low level and the virus can actually use that as a door to more exploits. So at the end of the day, an antivirus really is only of limited benefit.