Several online retailers have weak password security!

Retailers makes it easy for hackers!

Dashlane releases their top 100 online Retailers and “The Illusion of Personal Data Security in E-Commerce” this makes it easier for the hackers to know the common passwords for sites.   Some of the retailers that are mentioned are:

• Cafepress (affiliate link) — Although I have been a huge supporter for those really cool shirts and other personable merchandise.   They only require a 3 character password.  If your using a 3 character password, then you are just yelling to the hackers come get my credit card information and personal information!
• Scholastic Inc — This one seem likes they allow this for kids, I just hope they don’t give out all that valuable information.   They two also only require a 3 character password for an account!
• 1-800-flowers (1800flowers.com) — Only requrie a 1 character password, which means that you could use Q for your password and you’d be all set for someone to take your credit card information really quickly.

Those are only the few that I found that were really interesting.   I am calling out these retailers to make changes to their password lengths.  You can see the complete list of the 100 retailers with passwords length and various other data.   This link is thanks to Steve Gibson to see all the important stuff!

Password Length

I’ve talked about Lastpass in the past so I will not talk about it anymore.  I do recommend people use the maximum length you can have on sites that are really important to you.   This will prevent hackers from guessing real simple passwords.   Although you should have Higher, Lower, Numbers, and Special characters in your password to make password guessing even harder.  It is up to you to prevent your account from getting hacked or taken over.   No one can help you but yourself!

Why your Facebook account got hacked and how to secure it!

You’ve Probably seen:

Help me!!! the house was broken into lastnіght, i caught the theіves stealing our stuff on our securitу cameras! Do уou happen too recognize them?  (Some link such as Tumblr)

I know it is the hardest thing to understand but when it comes to getting your Facebook account, getting into your account is the most valuable for them.   Most of the time it is used to mine data such as your personal information or so they can become you but that it’s always the case.   It is sometimes the case that a spammer wants to get those click’s from your friends and you be the one who gets in trouble with Facebook.   It isn’t always the case though.   More than anything hackers or some call the crackers want to get your account to make money somehow.  99% of the time that is the case the other 1% is someone who wants to just be a wise guy and show you he did it!

Well it happened!

You probably like the rest of the people asking how do I prevent this in the future first thing first.  You need to change your password on your Facebook account.  Once you have your account back you will then need to end all activity on your facebook account besides the device your logged into and that means you will need to update your password on all devices.   

The Easiest way to end all activity on your facebook account is:

Settings — > Account Setting —>  (Click) Recongnized Devices —> (Then) End All activity

Before you start putting the password in to all those devices maybe it is time to use a good Password manager to do just that, I recommend Lastpass because it is has everything you need to help keep hackers out of your account.   You should use a minium 20 character length and make it as random as possible.   This is what I have used to keep people from guessing my password although it is good way to help prevent Phishing attacks from sites such as Facebook, Twitter, and other social media outlets!

Setup a 2 Authentication factor!

In some ways this has been the hardest for people to understand and to want to use because it slows down people logging into their account but it also makes it that much harder for someone to get into your account because they have to know your validation code.   This will help you keep your privacy and security safe.  There is a great tutorial on how to do it, and I use it with the Google Authenticator myself!

Review your Timeline!

It might not be needed but you never know what the hacker posted on your timeline or your activity and you should carefully check it out from the time you thought you got compromised to now.  You never know what has been posted or said about your until you do a complete inventory of damage control.  Delete any posts that you didn’t do and remove those from your time line.   Just look for a little X on the upper right corner.

Finally Review your security Settings!

Go back through your security settings and make sure the hacker didn’t enable something that you might regret later on.   For instants your timeline being public or your phone number or something that you don’t want anyone other than friends or family to know.  There are few places where you should check and maybe change if need be and they are:

Settings —> Privacy Settings

Settings —> Account Settings —> Timeline And Tagging

Settings —> Account Settings —> (-)Blocking

You never know what the hacker did to either unblock someone or change something that you had put private.   So this is what I call damage control.   This will keep you safe and secure, but remember the only way to truly be safe is watching what you do online and keep that information private as long as possible.

Webhost Deathmatch: Linux Vs. Windows

When you choose a desktop operating system, there is a pretty significant difference between Windows and Linux. The user interfaces are vastly disparate, many applications are designed for one OS or the other and the underlying kernels are worlds apart. The same concept applies for Linux VPS hosting and Windows hosting. While the differences in user experience tends to be lessened because you’re typically working through control panels, and not the operating system proper, you still have features, scripts and technology that one server OS supports that the other doesn’t. Here’s what you need to know.

Script Support

The script languages supported by Windows and Linux differ greatly. Perl and CGI are both difficult to support on Windows, while Windows technologies aren’t supported on Linux servers at all. While the latest Windows server operating system supports PHP, you aren’t guaranteed to have that version of Windows on specific hosts, so confirm the OS version if you want PHP scripts to work properly on a Windows server. Always keep essential script support in mind when you choose the server operating system. Scripting really is the primary decision maker for choosing Windows or Linux, as the two operating systems don’t share a lot of cross-platform scripting support.

Pricing

Linux distributions are generally free and are all open source operating systems. Some distros do require a paid commercial support package, but the pricing and overhead is less expensive than comparable Windows servers, due to Windows’ licensing costs. Windows also depends upon more hardware resources to run properly, requiring a more powerful server than you would otherwise use. Keep your price point in mind, and be aware of the capabilities you’ll get with Windows compared to Linux.

Microsoft Technologies

If you’re using FrontPage extensions, ASP, ASP.NET or .NET, you are essentially locked into a Windows server. Microsoft doesn’t make it easy to use this technology on Linux, BSD or OS X servers, although some emulation is possible. However, performance is not optimal, and it tends to take a lot more time and energy than just getting a Windows server on hand.

Database Technology

Database-driven scripts are common in web applications, and Linux database support covers MySQL technology. It does not, however, cover Access databases or Microsoft SQL. Enterprise-level applications use extensive database technology, and Access is great at handling high volumes of fields and information. If you need a specific type of database, confirm it is compatible with the server operating system you are choosing.

Security

Linux is widely considered a more secure operating system than Windows, mostly because the Linux architecture is not as easy for virus creators to program for. The lack of executable support in Linux prevents standard viruses from working, and security holes are plugged up by the many programmers looking at the open source code. Windows gets attacked by hackers on a consistent basis, and users have to wait for Microsoft to develop and deploy patches.

Which do you prefer for web hosting: Linux or Windows? Tell us in the comments.

Gregory Adams

Greg is a technology and mobile trend freelance writer with a penchant for rollerblading.

The Perfect Pin Password! How to not be predictable!

Predictability is the Key!

It isn’t like we have a lot of imagination, I was looking around and saw this blog post post about PIN number analysis.   Let’s just say after I read this, I got chills and it went down my back.   No one person can come up with a easy to remember PIN number and it be safe.   So the problem with this and other passwords are that people tend to make them easy.  This is where the problem lies, if it was easy to come up with a PIN number that is can be predictable then someone else can figure out the pin quite easily.

What throw out and what to keep!

Here are a few things that I saw on the analysis that you should be throw out for sure:

• Birth dates and years — This seems to be a very popular way to go to remember a pin number.   People are either using their year they are born or their month and date they are born to make a pin number for banks an other institutions.  Just throw those out the door.  If I could think of them so could a hacker who wants to get your money!
• Don’t just go down PIN #2580 — Here’s another that seems be a common ploy, looking at your phone and just going straight down.   Which seems to indicate no imagination on the part of  people making the pin.
• Don’t Use only one or two numbers like 1212, 6969, 2000, 1122 — It isn’t hard to figure out what numbers you use will make it easier to remember but it will always make it easier for the the hacker or the bank thief to get your money.
• Don’t try to be cleaver — Something like 42069 is one that is spoken really well on the analysis and thus it comes as a interesting pin.   He didn’t know why but I suspect I know why, and here it is.   420 is common for elight speak for smoking illegal sustances and we know what 69 is.  So you tried to be cleaver but I figure it out and I am sure someone else could easily.

Picking a Good Pin!

Now since we talk about the analysis of the pin numbers, a little and I do hope you checked out the Analysis.   I thought it would be a good idea to at try to guide you into coming up with a less predicable PIN and thus making it that much harder for a Hacker and would be bank thief to get access.   Here I will describe what you might want to do to make it almost unpredictable and still make it remember able. 

• Use the Random Number Generator — Come up with Four numbers you may want to use and use them as your PIN.   (Remember the rules, No repeating numbers, and nothing guessable.)
• After you find a PIN — try to come up with a four letter word that will allow you to remember the number.   You might also go backwards such as starting at the end and create a word for it using your phone.

Use your phone keypad to basically associate the pin with a letter so you can remember it or if you can come up with other ways that will help you in the long run.   You shouln’t write it down but if you do have to, I suggest using something like Lastpass password database and keeping it secure for your eyes only.

This is one way to do it but I am sure someone somewhere has a much better way but at least this way you have control of who or what will know your password.   You want to keep your money safe, and yes I am sure hackers are going to try to use this to figure out your new PIN but it is much harder for them to know which number you picked and when you did it.   So the ball is in your court and not theirs.  Hope this helps!