Malware, viruses, hacks, and anything else that may compromise your identity online, computer, or digital device.
Security and Privacy
WannaCry is ransomware that can lock up your data unless you pay the hacker who created it. WannaKiwi, however, finds the crypto key in your PCs RAM to undo the damage. It only seems to work about a third of the time, however. That's why Leo says to make sure you don't get it by altering your behavior, and by making sure you have current backups of your data should it happen. One thing you should never do is pay up, because you don't know if you'll get your data back, or if there's something even worse getting installed.
Eric has heard that iCloud is going to require two factor authentication for third party apps. Is that true? Leo says it is, and it's a good idea. The problem is that not all apps have a two factor authentication scheme, so Apple has a work around by requiring an app specific password as well. Starting June 15th, if he doesn't have two factor enabled, he'll be forced to do it. From there, he'll have to re-login with a second unique one time password.
Last weekend, the WannaCry Ransomware bit several hundred thousand computer systems, including sixteen hospitals in the UK. The ransomware infected the systems and encrypted all data. The reason this one was really bad is that it was a "worm," or a "network aware virus" that would spread out over the local area network to find other computers to infect, and bring the whole establishment to its knees.
Alan wants to know if an antivirus utility is any good anymore for malware. How about on a mobile device? Leo says that all too often, an antivirus leaves people more vulnerable because most malware is a zero day exploit. Antivirus can't stop users from themselves, either. All antivirus utilities have to hook themselves into the OS at a very low level and the virus can actually use that as a door to more exploits. So at the end of the day, an antivirus really is only of limited benefit.
Billy is about to make the switch to Windows. As an old timer, he feels that Apple has abandoned his demographic. So he bought a Lenovo X1 Yoga to replace his aging Mac laptop. Leo says that the latest Mac laptops with Touch Bar are annoying and the Touch Bar gets in the way more than it helps. Lenovo is doing a lot of creative hardware on the Windows side, as are other manufacturers.
George is using a Tiny Hardware Firewall and he sees that it would let him customize the settings. Can it be made more secure? Leo says that the Tiny Hardware Firewall is pretty darn secure as is. Leo hasn't played with the configurations, but he wouldn't want to, either. He just uses it in default mode and he's completely safe.
Grover has a popup that says to call Microsoft Support. Has he been bit by ransomware? Leo says no, probably not. It's a phishing attack, but it's to try and get him to call in and then they charge him and access his computer. It's Scareware, really. He can ignore it, but it keeps popping up and he has to reboot his system to get rid of it. He even replaced the hard drive, but it didn't help.
The latest ransomware attack is called WannaCry and it's spreading via phishing email attacks. The ransomware not only encrypts your data — it also has a built-in kill switch on websites. Security researchers may have crafted a fix to it, but there's a catch. The encryption is done using Microsoft's bit locker, and the fix is to take advantage of a flaw in the cryptographic memory that keeps the keys in RAM so it can harvest them and unlock your data.
Michele has a gaming computer and she has been having trouble with it ever since she upgraded to Windows 10. Microsoft now automatically installs updates without her permission. Leo says she can defer the updates for a limited amount of time, but ultimately for security purposes, she'll have to do them.