562.225.4222

Facebook
Twitter
YOUTUBE
LinkedIn
GOOGLE

Tag Archives: palos verdes

Windows 10 Preview

Windows 10 is slated to come out later this year, with the goal of not just superseding the oft maligned windows 8 (and windows 8.1), but actually replacing it. Microsoft will offer Windows 10 as a free upgrade to users with devices. This is good for consumers who love their device and want to try the new Windows 10 without having to buy a new one.

One of the new features of the new Windows OS are a new redesigned browser that replaces Internet Explorer, called Microsoft Edge. Microsoft Edge is a minimalist internet browser that touts faster browsing speed, increased readability, and the ability to write and draw on a touch screen without the need of a stylus. This is great for tablet and windows users who do not want to get an expensive stylus to go with the handheld. Cortana is also being embedded in many features of windows, similar to what she was able to do in Windows phones. You can ask her questions and she will answer, whether they are things that can be found on the internet or windows options, like how do I project a screen (answer: Windows key + P). It is still not known whether she is an upgraded version of the Windows Phone Cortana or if it’s just her but ported to Windows 10.

One of the more exciting features that Windows 10 promises is the integration of the HoloLens with the Windows 10 and its apps. HoloLens is an augmented reality head set that merges everyday surroundings with holograms which the user can interact with. Those Holograms can be in the form of windows apps, which the user can control using their hands (a la Kinect), voice, and even gaze.

The new Windows Store is revamped, allowing apps to work in all Windows platforms. This makes it easier for Developers to have their apps be accessible to all one billion windows devices. Before, a windows phone app would only work on (certain) windows phones, but now it can work on Tablets, Desktops, Laptops, Surface, and even Xbox One and HoloLens. Not only can windows apps run on all windows platforms, but iOS and Android apps can be run on windows, as long as the app is ported by the developer. Microsoft is working on making it easier for developers to do that, which would be a win-win if it works: Windows App store grows and becomes competitive, and developers have their apps available to an extra billion devices with minimal effort.

TRA consulting, we not only focus on Home Computer security, but also in SOHO (Small Office/Home Office) security. Our goal is to provide full IT support to growing small businesses who are too small to have a full time IT staff, yet big enough that they need one. We have many highly satisfied customers in the Long Beach, Orange County, Southbay, and Los Angeles area. Contact us today, and let us take care of all of your computer security needs. Our prices are reasonable and our services are top notch.

The Threat Within

What’s the biggest threat to a company’s network security? Viruses? Hackers? Worms? The NSA? It’s none of the above. The weakest point are the users. That’s right, the same people that you trust to use the computers that you want to protect are the ones that are putting it at risk, according to a recent study by the Ponemon Institute. 78% of companies that took part in this study blame their employees for being careless or negligent when following the company’s security policies. Think about it; no matter how secure a computer is (within reason, otherwise the user cannot do their job) the user is the one making security decisions every minute they spend in front of that computer. “Should I click on this Facebook banner ad?”, “This email looks official, let me download the attachment and unzip it”, “Looks like I won the Lottery, even though I’ve never played”

Email is one of the most likely vectors to get a computer infected. Some estimates say that 90% of all email traveling through the internet is spam. Even though that statistic is probably overblown, the amount of spam out there keeps growing by the day. A lot of that spam is not just trying to sell you prescription pills or knockoff watches, but they are also trying to get your personal information and/or delivering an infection. The worst thing is that they spammers are getting smarter and making some of their emails more and more difficult to tell from the real deal. This method of spamming is called Phishing, which is very common and can even evade most spam detectors.

Educating the users is the best solution to keep computer and networks safe. There are many ways to keep a network safe with different devices and programs that will do an excellent job. However, at the end of the day, it’s the user who holds the power with their keyboard and mice to keep the computer out of dangerous situations. Now that companies are beginning to realize just how important is for their employees to be aware of the responsibility they have keeping the company safe from intrusion, it’s up to the company to find a way to better educate the employees at staying safe. This does not mean that traditional methods of security need to go out the window; these two philosophies are complimentary, not orthogonal, to each other.

Spending money in security is not the waste of money a lot of SMB’s (and even some big corporations) think it is. In fact, it’s the opposite; it helps the business to not lose money. Just like the saying, there is more than one way to skin a cat, there is more than one approach towards network security. Whatever your philosophy is, making sure it is well implemented is the biggest hurdle.

At TRA consulting, our philosophy is to be proactive when it comes to desktop and network security. We combine end point tools which can monitor, alert, patch, script, and have the ability to provide remote support. All these tools and more can help you keep your computer and network safe at a fraction of the price of a full-time IT staff. We have many satisfied customers in the Long Beach, Orange County, Southbay, Greater Los Angeles Area, San Diego, Arizona, and Midwest.

Our Motto is “Maximum Satisfaction, Minimum Fuss”. Call us today for a free consultation!

 

Beware of the Predator

As if there weren’t enough challenges for growing small and medium size businesses, there is another one to add to their list: Enterprise level malware software at affordable prices. Up to recently, the majority of Data breaches have been targeted at big corporation (Target, Staples, Home Depot, etc.), however now the targets have shifted to smaller companies due to the commercialization of similar malware/keyloggers. Predator Pain and Limitless are two keylogging malware programs that can be bought from underground markets for cheap prices and can be used to attack and spy on anyone. The majority of targets of these keylogging software has been small and medium size businesses, as shown by TrendMicro research. Even though the software can be bought for an inexpensive amount, it is not a rudimentary in its execution. It can steal web (including banking) and email credentials, as well as reconfigure the email account so that it send the victim’s emails directly to the hacker. It can also capture keystrokes and screen shots of the computer. On top of that, it will encrypt all the communications between the infected computer and the criminal’s computer.

The method that criminals use to infect the computers is usually a drive-by download or phishing. Once the computer is infected, the malware will start collecting data, keystrokes and screenshots of the computer. If you are infected with this keylogger, what can you do? Well, there is not much out there in the form of removal of this specific malware. A quick google search for “How to remove Predator Pain” reveals very little on how to properly remove this nasty keylogger. In fact, a lot of the results are about how to use the keylogger and where to get it (paid or free). The only one I was able to find is a bit complicated, and it includes editing the registry, something the average user is not recommended to do, as it could lead to even more problems. There are tools out there that can help get rid of this and other nasty malwares, like Malwarebyes, Spybot, SuperAntiSpyware, but the best solution is prevention.

Just like the saying, an ounce of prevention is worth more than a pound of cure. At TRA Consulting we specialize in IT Managed services geared for Small and Medium size businesses (SMB’s). We take care of all their IT needs, including but not limited to: Desktop support, server administration, Cloud Services integration, Network Administration/Security, etc.

With all the threats out there in the cyber-world, having us in your corner is one of the better decisions a growing business can do. . We have many highly satisfied customers in the Southern California area, including San Diego, Long Beach, Orange County, Southbay, and Los Angeles area. Contact us today, and let us take care of all of your computer security needs. Don’t let security threats stifle your business’s growth. Our prices are reasonable and our services are top notch. Call us today for a free consultation. At TRA Consulting, our motto is “Maximum Satisfaction, Minimum Fuss”

Beware of the Predator

As if there weren’t enough challenges for growing small and medium size businesses, there is another one to add to their list: Enterprise level malware software at affordable prices. Up to recently, the majority of Data breaches have been targeted at big corporation (Target, Staples, Home Depot, etc.), however now the targets have shifted to smaller companies due to the commercialization of similar malware/keyloggers. Predator Pain and Limitless are two keylogging malware programs that can be bought from underground markets for cheap prices and can be used to attack and spy on anyone. The majority of targets of these keylogging software has been small and medium size businesses, as shown by TrendMicro research. Even though the software can be bought for an inexpensive amount, it is not a rudimentary in its execution. It can steal web (including banking) and email credentials, as well as reconfigure the email account so that it send the victim’s emails directly to the hacker. It can also capture keystrokes and screen shots of the computer. On top of that, it will encrypt all the communications between the infected computer and the criminal’s computer.

The method that criminals use to infect the computers is usually a drive-by download or phishing. Once the computer is infected, the malware will start collecting data, keystrokes and screenshots of the computer. If you are infected with this keylogger, what can you do? Well, there is not much out there in the form of removal of this specific malware. A quick google search for “How to remove Predator Pain” reveals very little on how to properly remove this nasty keylogger. In fact, a lot of the results are about how to use the keylogger and where to get it (paid or free). The only one I was able to find is a bit complicated, and it includes editing the registry, something the average user is not recommended to do, as it could lead to even more problems. There are tools out there that can help get rid of this and other nasty malwares, like Malwarebyes, Spybot, SuperAntiSpyware, but the best solution is prevention.

Just like the saying, an ounce of prevention is worth more than a pound of cure. At TRA Consulting we specialize in IT Managed services geared for Small and Medium size businesses (SMB’s). We take care of all their IT needs, including but not limited to: Desktop support, server administration, Cloud Services integration, Network Administration/Security, etc.

With all the threats out there in the cyber-world, having us in your corner is one of the better decisions a growing business can do. . We have many highly satisfied customers in the Southern California area, including San Diego, Long Beach, Orange County, Southbay, and Los Angeles area. Contact us today, and let us take care of all of your computer security needs. Don’t let security threats stifle your business’s growth. Our prices are reasonable and our services are top notch. Call us today for a free consultation. At TRA Consulting, our motto is “Maximum Satisfaction, Minimum Fuss”

POODLE in the middle

Looks like the trend of security flaws in encryption protocols continues. Heartbleed, Bash Shellshock, and now POODLE. POODLE stands for Padding Oracle On Downgraded Legacy Encryption. This basically means that on encrypted HTTPS connections, applications like browsers will be forced to default down from TLS to SSL 3.0 even when the application supports all the versions of TLS. SSL 3.0 has been shown to be vulnerable to man-in-the-middle attacks since about 15 years ago. However, many applications and servers still use it because they have not adopted the TLS standard for encryption. An example of this is Internet Explorer 6. Many servers still allow browsers to connect using SSL 3.0, like IE 6, which cannot support TLS. If servers or websites dropped connections that did not support TLS encryption, the applications that only had SSL 3.0 would be dropped as well. Even though the majority of currently browsers support TLS, there are still some people who use older browsers. Even newer browsers use the SSL 3.0 protocol as backup, and this is the mechanism that the POODLE attack uses to hack a computer. In order for a hacker to be able to listen in and intercept your private data with the POODLE attack, they have to be within the same network as you, usually in a public Wi-Fi setting, and then have to inject malicious JavaScript code in your computer from visiting a compromised website, then they can start their man-in-the-middle attack to intercept your cookies and other data.

Browsers like Google Chrome and Mozilla Firefox have already patched this flaw by using the mechanism of TLS_FALLBACK_SCSV, which prevents the automatic fallback down to SSL 3.0. Google engineers are the ones that found the POODLE Vulnerability, which will effectively kill any future use (finally!) of SSL 3.0. Chrome will go beyond patching this vulnerability and will get rid of SSL 3.0 from their browser in the next version of the browser (good riddance!). Internet Explorer released a fixit to Even Sony is patching this on their PS3 and PS4 consoles, permanently getting rid of SSL 3.0 as a form of encryption.

There are still some servers (websites) that still rely on SSL 3.0 to authenticate with the clients, but this is slowly getting patched. Even OpenSSL (which was victim of the Hearbleed bug earlier this year) has patched their code with the included the TLS_FALLBACK_SCSV mechanism. However, the good news regarding POODLE vulnerability stop there. There is a Variant that affects TLS connections as well, but that’s a topic for another blog post.

TRA consulting not only focuses on Home Personal security, but also in SMB (Small to Medium size Businesses) security. Our goal is to provide full IT support to growing small businesses who are too small to have a full time IT staff, yet big enough that they need one. We have many highly satisfied customers in the Long Beach, Orange County, South bay, and Los Angeles area. Contact us today, and let us take care of all of your computer security needs. Our prices are reasonable and our services are top notch. Our motto is “minimum fuss, maximum satisfaction”. Call us Today!!

IT Consulting      |       Managed IT       |      Cloud       |       Desktop Support         |       Privacy        |       Term of Use        |       Sitemap        |       Contact Us