Archive for the ‘Privacy’ Category

LSO – Flash Player Spyware?

Sunday, November 23rd, 2008

LSO or local shared object, introduced in Flash player 6, is like a gigantic cookie; the default size is 100KB. Also known as Flash cookies, they are used to create a customized browsing experience by remembering things such as login, password, or anything else you enter or browse to.

Explanation

A normal LSO can only be accessed from the domain that created them. For example, if www.siteA.com created an LSO, www.siteB.com cannot access it. BUT, a 3rd party LSO can be created which can be accessed by all domains. The default, unfortunately, is to enable LSO and 3rd party LSO.

What to do

Fortunately, you can control how much, if any, LSO experience you want. Just visit the Flash player settings manager and change the settings to your liking. LSO and 3rd party LSO can be disabled for customized per site. Note that you must have at least Flash player 8 to disable 3rd party (shared) LSOs.

3rd party junk file cleaners, such as ccleaner, may delete the settings you changed which means they will revert back to the defaults which is LSO and 3rd party LSO enabled.

Why more people are not aware of LSOs is beyond me.

Resources

You can read about Adobe’s explanation of 3rd party lso and Adobe lso article.

Before You Change Phone Numbers, Do This

Friday, October 17th, 2008

Before you lock in to a new phone number, do some quick due diligence. Go to callercomplaints.com and search on the new telephone number to make sure it is not “polluted”. Getting a new phone number that has a bad history, especially for a business, can be devastating. It is not worth the time to deal with nagging creditors calling about someone you don’t know (i.e. who had the phone number previously). Don’t forget to register your new phone number on the national do-not-call registry.

Doug

New Additions to Telemarketer’s Page

Wednesday, October 15th, 2008

I added a few more helpful tips to mysecurepc.com’s stop telemarketers page.

Doug

Do Not Call Registry does Work

Monday, October 13th, 2008

Recently Smartlab Software changed telephone numbers and immediately registered with the national do not call registry.

One of the problems with a new telephone number is you have no idea of its history. The day we changed over the uninvited phone calls started. They were from a collection agency looking for a Kathleen. They were ususally automated but sometimes from a call center in India. The phone numbers showed up in caller id but emanate from several sources. After repeatly hanging up on them, not answering, telling them we were a business and not Kathleen, we finally filed a complaint. Though technically the phone calls were not from telemarketers, we thought the complaint process would work.

And it worked. Within one day the phone calls stopped. BTW, only the name of the business and the city and state were given in the personal information section.

More Chrome Privacy Issues

Wednesday, October 8th, 2008

For those of you who don’t know, a unique ID is assigned when Google Chrome is installed. Every time Chrome is launched, guess who knows who launched it. There is a little utility that erases the client ID before Chrome is launched; a little bit more privacy for you.

Download the Chrome Privacy Guard and run it instead of Chrome. The CPG will eradicate the client ID then launch Chrome. Easy.

Doug

Google Chrome Privacy Issue

Thursday, September 11th, 2008

Just to let you know about a privacy issue with Google’s Chrome browser. The browser has a feature called Auto Suggest which, as the name implies, suggests similar web sites for the one you are browsing. The privacy issue comes in because the URL is sent to Google, along with a plethora of information, for analysis and the suggestions are sent back. Unfortunately, this feature defaults to ‘on’.

To turn it off: Tools > Options > Basics tab > Manage (under default search) > uncheck “Use a suggestion service to help complete searches and URLs typed in the address bar”.

Read more about Google auto suggest service.

Doug

Phishing at PayPal

Friday, June 27th, 2008

I received a very real-looking email from PayPal with the subject line: “PayPal Notification: Payments and Statement”. The crux of the message was they debited my business account for $32.00. No reason given.

The link to view my Account Summary contained paypal.com but hovering my mouse over it showed it went to somehost.lan.io domain…obviously a fake.

The email was forwarded to spoof@paypal.com which brought a quick reply saying the email was, indeed, a spoof and they will take care of it. This event goes back to one of mysecurepc.com’s tenets: do not click on any email link.

Doug

You May Start Getting Telemarketing Phone Calls Soon

Friday, September 21st, 2007

The Federal Trade Commission’s do not call list started receiving numbers in June, 2003. The expiration date was 5 years later…June 2008. The telemarketers are salivating at that date because they know people will forget to reregister their phone numbers. After all their are 149 million registered numbers.

The FTC plans on a program to alert people to reregister their phones starting next year.

For the most part annoying telephone calls have dropped dramatically though some telemarketers still abuse the system.

The program is supported by the government requiring telemarketers to pay annual subscription fees so they have access to blocked numbers so their autodial programs will not call them.

How to Reregister

People can register their home and cell phone numbers or file complaints at donotcall.gov or by calling 1-888-382-1222.
Do not forget that organizations engaged in charitable, political or survey work are exempt. Also companies that have an established business relationship with a customer also may call for up to 18 months after the last purchase, payment or delivery.

Doug

Like iTunes? …I Don’t

Monday, June 4th, 2007

And why would I dislike iTunes? One word: privacy. When a song is purchased and downloaded from Apple your email and customer information is embedded in the file. The worst part is the data is -not- encrypted; it is exposed as plain text. What if your iPod is lost or stolen? You are out of luck. For me, I will skip iTunes and stay with my MP3 player.

Doug

New Social Security Number Law

Tuesday, February 13th, 2007

Though this is in the state of Nevada similar laws are being passed around the country. As of 1 January 2007, no one, including the government, can require a person to include a social security number on a document except for the usual government exclusions. The statute is NSR 239B.030 – confidentiality of social security numbers.

What this means is you do not have to give out your social security number unless required by law. We have been very successful at not giving out our social security number – just refuse.

Doug