2012 New Years Resolution: Full Disk Encryption on Every Computer You Own

Micro-Ram recommends everyone follow the great advice of the Electronic Frontier Foundation and encrypt the disk on every computer you own. Windows users have built in support in Win7 and free options for XP & Vista via TrueCrypt. Apple users, please upgrade to 10.7 Lion and take advantage of the great new full disk encryption included in Lion. This is a simple method of securing your data from lost / stolen computers. It is also ensures a worry-free exchange of drives when your disk wears out or is retired. Modern Intel (Core i3/5/7) processors built after 2009 include hardware based encryption routines using the American Encryption Standard (AES) for a negligible performance impact.

Read More: EFF.ORG

Create a Lion Recovery Boot Disc

If you have you upgraded to Lion on your Mac and would like to create a DVD restore disc. Visit this web site at Apple.com:

https://support.apple.com/kb/dl1433

Mac FAQ – Answers for your basic Apple Mac questions

The TEKSERVE FAQ is an easy to understand guide for all Apple Mac computer users, published and refined by an independent Apple computer repair company in NY. It answers questions ranging from when your Mac needs service to normal maintenance and every day usage scenarios. This guide is great for switchers (a.k.a. former Windows users) and those just learning a computer for the first time.

Link: TekServe.com

Apple users need to remove DigiNotar certificate in Keychain Access

- Open Applications -> Utilities -> Keychain Access
- Using the Search in the upper right
- Type in “diginotar”
- Right click on “DigiNotar Root CA” and select “Delete DigiNotar Root CA”
- Repeat for all DigiNotar entries

Note: Due to the nature of EV Certificate handling on the Mac, deleting the Certificate is the only safe way to handle this security issue. Simply marking this certificate as Untrusted will not work.

More information here:
http://www.tuaw.com/2011/09/01/how-to-get-rid-of-diginotar-digital-certificates-from-os-x/

UPDATE: Apple released a security update 2011-005 on Sept 9, 2011 to address this issue. User will receive this update from Apple automatically via Software Update if you are on a current version of Snow Leopard 10.6.8 or Lion 10.7.1.

Monday August 22 2011 Email Issue

Mail was queued Monday due to a server issue. No email was lost but post receipt processing of mail like spam and virus checking had slowed the delivery for up to 3 hours.

I have looked at ways to eliminate this issue with more redundant/independent servers. The fact remains that there are not any ways to avoid this. The problem is not the servers, the email specification is very robust in the way mail is handled to reach a destination. There are settings for multiple mail servers called MX records and multiple servers handle each MX record. The real problem is that a person has a single final email address and only one mailbox for that email. The email system will get the message there eventually.

Short of having two email addresses on different domains, there really is not a better way to handle this. We can keep jumping to different mail servers, but eventually every mail server will have a glitch as most of them all run the same email server software (i.e. Sendmail, Postfix and Exim).

I don’t want to make light of an issue, but let this remind us that email is not guaranteed to be instant or guarantee delivery with the current state of spam and spam filtering. Remember to always follow-up on important emails, never assume the receiver has read the message without a reply.

 

Has my password been hacked?

I found this to be a neat idea. This site uses a number of databases that have been released by hackers to the public. Note: You will be giving them your email address, but they CLAIM to not store it. There are no passwords on this site and your email address is not supposed to be stored. The purpose is to let you know if you need to start changing your passwords on the websites you use.

https://shouldichangemypassword.com/

Fake “Adobe Update” Fishing Attack

All you have to do is look in your spam folder and you will see plenty of emails like this. If you were to click on the link in the email, you would be taken to a server that DOES NOT belong to Adobe. DO NOT ever click on a link in an email. If you have an Adobe product installed, it has the ability to update itself. You will never get an email from Adobe or any other company telling you to update. Incidentally this domain would land you on an unknown server in China.

 

How to secure yourself from “MAC Defender” Malware for OSX

The MAC Defender malware pops up on your screen by using JavaScript during Google searches. IT DOES NOT AUTO-INSTALL! You have to install it. Don’t. :)

 

Safari users

Select the Safari menu, Preferences. Click on the General icon. Make sure the Open “Safe” files after downloading is clear.

Free Mac Anti-Virus from Sophos

Sophos offers free antivirus for the Mac.

General Security

Micro-Ram recommends all Mac users run as a normal user even if you are the only user on your Mac. Open System Preferences, Accounts. Click on the + to add an “admin” account (you can use a name other than admin). Then change your normal everyday account to NOT have administrator privileges.

 

Now when you install new software, simply type the “admin” user name and password. This will help you understand that you are installing new software that has full access to the system folders. Only type in your “admin” user name and password when you know you are installing software.

Uninstall Flash on Mac OSX

There are too many security issues surrounding the Adobe Flash player plug-in. HTML5 now supports video playback without Adobe Flash. After you uninstall, use Safari to visit youtube.com/html5 and click Join to view videos without Flash.

Download this file from adobe to quickly uninstall Flash from your Mac.

See this Adobe document for more information.

All Mac users need to enable certificate revocation

Recently some security researchers have been able to generate fake SSL certificates. The SSL system was designed to handle bad certificates with a “revocation list”. The problem is Apple has chosen not to enable the updating of that list automatically. Follow these steps to ensure you are as secure as possible. [source]

- Open Applications -> Utilities -> Keychain Access
- Under Keychain Access menu, select Preferences…
- Select the Certificates tab
- Set “Online Certificate Status Protocol (OCSP)” to “Best Attempt”
- Set “Certificate Revocation List (CRL)” to “Best Attempt”
- Set “Priority” to “OCSP”