Posts

How Secure Are You And That ATM Transaction?

ATM fraud is more common and likely than a crime committed directly against customers who are in the process of attempting to withdraw cash from the machines, according to NetworkWorld.

When studying “emergency PIN technologies” they state fraud was one of the few concrete conclusions from a report about the use of emergency technology at ATMs issued by the Federal Trade Commission.

Meanwhile reports indicate that thieves used “skimmer” devices to steal $217,000 from Long Island Banks between April and the end of May 2010. Banking information was then re-encoded onto the magnetic strips of blank gift cards. Investigators report that the thefts occurred in Suffolk County, N.Y. They estimate that between 100 and 200 accounts may have been cloned.

The ATM is all about quick easy cash. In the world of technology, when “quick” is paired with “easy” there is a sacrifice made in regards to security. Security is often slow and difficult and most people won’t sacrifice convenience for personal security.

Certainly there is a degree of security in ATMs, but to make them fully secure requires the end user to do more, and unfortunately users often don’t have the ability to jump through all the hoops security requires.

However by understanding some of the risks and incorporating some security tips you can protect yourself.

Always be vigilant when you are at an ATM. Look around the perimeter of the kiosk and beware of anyone paying unwanted attention. If someone is “lurking” they could be waiting to pounce or are shoulder surfing to get your PIN code.

Choose a PIN that’s not easily guessed but can be quickly entered.  Consecutive numbers or the same numbers is never a good idea. Often new ATMs won’t allow you to choose a “soft” PIN anyway.

Don’t ever let anyone help you at an ATM. It’s hard to envision what kind of scenario might involve another person intervening at an ATM. But consider this: Your card gets stuck, someone graciously peeks their head over your shoulder to help. They unstick your card and help you finish the transaction. In the process they got your PIN and swapped your card with another.

In another example two women picked up drunk guys from bars who were waiting for a cab and persuaded them to pull money out of their ATMs while they watched for the PINs. Once they got back to the car one, while making out with him, would pick his pocket and hand off the card to the friend.

Beware of ATM skimming and be able to recognize what an ATM skimmer looks like. Here are some excellent pictures of a well made covert skimming device attached to the face of an ATM. You really need to look for it to recognize it. Not all are as well crafted, but some are very good. ATM skimming of course is when the information on the back of your card is “skimmed” and the criminal then burns the data onto another card and makes withdrawals.

They may have also installed a camera behind a brochure holder, speaker, mirror or in a light bar. If you ever get a vibe that something doesn’t feel right, just leave. Always shield the ATM keypad with your second before entering your PIN.

Meanwhile Romanian Police raided 38 locations and arrested five fraudsters allegedly part of a card cloning gang. Those detained face accusations of being members of an organized crime group, unauthorized access to a computer system, possessing card-cloning equipment, access device fraud and distributing fake electronic-payment devices. Based on this video, they didn’t get a whole lot of equipment but confiscated some cash.

To help combat this type of crime, ADT unveiled the ADT Anti-Skim ATM Security Solution, which helps prevent skimming attempts and detects skimming devices on all major ATM makes and models.

ADT’s anti-skim solution is installed inside an ATM near the card reader, making it invisible from the outside. The solution detects the presence of foreign devices placed over or near an ATM card entry slot, without disrupting the customer transaction or operation of most ATMs. It can trigger a silent alarm for command center response and coordinate video surveillance of all skimming activities. Also, the technology helps prevent card-skimming attempts by interrupting the operation of an illegal card reader.

This technology does not require any software adjustments be made to the ATM itself, and does not connect to or affect the ATM communications network. Prior to its North American introduction, the ADT Anti-Skim ATM Security Solution was successfully field tested on dozens of ATMs of four major U.S. financial institutions in controlled pilot programs. Testing pilots yielded positive results, with no known skimming compromises occurring.

Robert Siciliano personal security expert to ADT Home Security Source discussing ATM skimming on Extra TV. Disclosures.

Burglary Deterred with DNA Technology

This is very cool. In the UK in a town called Halton, break-ins have dropped dramatically.

Burglaries in homes and businesses are down by almost 70 percent, compared with the same time last year. That’s an incredible reduction in crime.

People are feeling safer and local law enforcement and the citizens are taking back control of their neighborhoods. It all began with a concerted effort and an “I’m not going to take it any more” attitude.

The effort became a success when home security training along with special DNA water was distributed to more than 4,000 homes and many more businesses during the past year.

Local officials got together with the Police, Fire and Rescue, Probation Service, Youth Offending Teams, Housing Trust, Landlords, Chamber of Commerce, and Neighborhood Management to co-ordinate the campaign.

Effective safety and security tips and education revolves around informing people on proper locking of doors and windows, giving their homes a lived in look, closing blinds and cutting up boxes when high end items are purchased. Most important is installing multiple layers of security including home security alarms, security cameras and additional signage alerting burglars to the security of the dwelling.

One interesting solution they used was something called SmartWater anti-burglary solution. This is a special liquid which can mark high value property with a unique DNA code. It is virtually impossible to remove and shows up under UV light. Experts say no two SmartWater systems have the same forensic code so every house or business can protect their property with their own individual identification.”

How crazy is this: a spray system activated by intruders will immediately link the offender to the scene of the crime through a DNA code.

When all the officials got together and alerted everyone, I’m sure burglars also got word that they’d be identified and caught when breaking into a house. Getting caught is often an effective deterrent. That’s what an alarm does too.

Robert Siciliano personal security expert to ADT Home Security Source discussing Home Security and Identity Theft on TBS Movie and a Makeover. Disclosures.

Facebook + Hackers – Privacy = You Lose

I’m as sick of writing about it as you are sick of reading about it. But because Facebook has become a societal juggernaut: a massive inexorable force that seems to crush everything in its way, we need to discuss it because it’s messing with lots of functions of society.

We should all now know that whatever you post on Facebook is not private. You may think it is, but it isn’t. Even though you may have gone through all kinds of privacy settings and locked down your profile, Facebook has changed them up internally so many times that they may have defaulted to something far less private then what you previously set.

Furthermore, no matter how private you have set them to, if you friend someone who you don’t know (like that human resource officer), they see what’s “private” and anyone on the “inside” can easily replicate anything you post to the world.

The activist groups waging what amounts to an undeclared war against the social-networking site for the last year, complete with no fewer than three letters to federal regulators claiming Facebook’s actions are illegal said that they’re hardly ready to declare a truce.

Attacks targeting Facebook users will continue, and they could easily become even more dangerous. Computerworld reports “There are limitations to what Facebook can do to stop this,” said Patrik Runald, a U.K.-based researcher for Websense Security Labs. “I wouldn’t be surprised to see another attack this weekend. Clearly, they work.”

Websense has identified more than 100 variations of the same Facebook attack app used in the two attacks, all identical except for the API keys that Facebook requires.

What does this mean to you?

For crying out loud stop telling the world you hate your boss, neighbor, students’ teachers, or spouse and you’d like to boil a bunny on the stove to teach them a lesson. I guarantee even if you are kidding, someone won’t like it. What you say/do/post, lasts forever.

Stop playing the stupid 3rd party games. When you answer “25 questions about whatever” that data goes straight into the hands of some entity that you would never have volunteered it to.

Make sure you PC is secured. Keep your operating system up to date with security patches and anti-virus and don’t download anything from any email you receive or click links in the body of any email. Once you start messing with these files you become a Petri dish spreading a virus.

Robert Siciliano personal security expert to Home Security Source discussing Facebook scams on CNN.

Summertime Scams Are Coming

As the spring rolls through and the summer heats up, the bad guy is planning his next seasonal scams.  The U.S. Federal Trade Commission has on average over 15,000 complaints a year related to travel, vacation or timeshare scams. It’s important to have summer safety in mind when planning your next summer vacations.

OK, I’ll admit it. I got scammed in a timeshare deal, kind of. I got what I paid for, but many lies were told to get me to sign on the dotted line. Whenever someone offers you money or dinner or tickets to anything in exchange for your time to sit down and learn about a timeshare “opportunity”, know that a very hard sell by someone who does not take no for an answer is coming. The way we got scammed was we were told we’d have no problem renting it out, which was the defining reason I’d commit to buy. The reality is there are hundreds of thousands of timeshares for rent. Which means it’s cheaper to rent someone else’s timeshare than it is to buy one and people who rent them out often do so for less than their annual maintenance fees.

Most people are not equipped to say no to these professionals. So if you absolutely don’t want to buy a timeshare, don’t take the bait, don’t go to the sales presentation, and for heaven’s sake don’t do it if you are under the influence of alcohol!

Another devious summer scam relates to classified offerings for summertime rentals that don’t exist. There may very well be an actual cottage rental, but the scammer may not own it and he may be renting it to 30 people the same week. This is an easy scam to pull off and often involves up front deposits that the victim never gets back.

The best way to prevent getting scammed and ensure summer safety is by dealing with a local real estate agent who specializes in rentals or going through a referral of a friend who has a previous relationship with the owner.

As crazy as it sounds, you are better off paying via a credit card number opposed to a check. Once a check is cashed, that’s it; you don’t have many (or any) options of recouping those funds if fraud is detected. There are a few more protections available when using a credit card.

Robert Siciliano personal security expert to Home Security Source discussing scams on the Donnie Deutsch The Big Idea Show.

Renting and Securing an Apartment

The time has come to leave the nest. The little birdie has to spread its wings and fly on their own whether they like it or not.  The process is often overwhelming and difficult and the results can end up being great or awful. But knowing what you’re getting yourself into ahead of time can save you all kinds of headaches down the road.

Check the crime climate of the city/town/neighborhood you are considering moving to.  Often we make moving decisions based on convenience and price.  However consider spending a little more (or even less) if another location is safer but less convenient.

Protect your identity. Landlords almost always ask for a Social Security Number in order to check an applicant’s credit prior to considering them for a move. It is generally not an option to say NO. However by investing in a credit freeze or credit monitoring you can reduce your risks that the Social Security Number will be used for identity theft.

Check out potential roommates. I did the roommate thing throughout my entire 20’s. I had the best and the worst roommates of all times. Some, I am friends with today and others, I wish I never met. There are numerous considerations to be made. The most important consideration is your personal security. Do a background check before signing a lease with a potential roommate.  Determine if they have any type of a criminal history. A background check may also determine if they have even been bankrupt.

Ask the landlord about options for installing an apartment security alarm for maximum safety. Apartment security systems today are easy to install for a do-it-yourselfer or certified alarm dealer. Often they require minimal wiring which means the landlord should have a problem with it. Wireless home alarms are even easier and only require batteries and two sided tape. If the landlord opposes an apartment security system, then the apartment is the right fit for you.

Robert Siciliano personal security expert to Home Security Source discussing burglar proofing your home on Fox Boston.

Police Offer Home Security Tips

Wichita Kansas, an estimated population of 366,046 makes it the 51st largest city in the country and the most populous city in Kansas. It’s a city by anyone’s definition.

And like all cities, it has had its share of successes and bad apples. Including Dennis Lynn Rader (born March 9, 1945) is an American serial killer who murdered ten people in Sedgwick County (in and around Wichita, Kansas), between 1974 and 1991.

He was known as the BTK killer which stands for “bind, torture and kill” and describes his modus operandi. He sent letters describing the details of the killings to police and to local news outlets during the period of time in which the murders took place. After a long hiatus in the 1990s, Rader resumed sending letters in 2004, leading to his 2005 arrest and subsequent conviction. Fortunately he is behind bars serving 10 life sentences. But that doesn’t mean crime doesn’t continue in his absence.

Recently Police launched new efforts to help curb burglaries.  Local police say residential burglaries increased last year by 9% even as overall burglary numbers dropped 1.5%.

Police are reminding people that they need to practice safe techniques to make sure homes and belongings are secure.  That includes making sure doors and windows are locked and not leaving your garage door open.

You’d think a metropolitan city that has had a killer as bad as Dennis Rader would lock their doors. But the societal and cultural phenomenon known as “It can’t happen to me” is everywhere and people forget that a serial killer used to walk their streets. But not you Dear Reader. The fact you’re reading this you know there very well could be another Dennis Rader there right now.

Here are home burglary prevention tips direct from the police who once dealt with Dennis Rader:

Residential burglars work mostly during the day and when a residence is more likely to be unoccupied. Most burglars work alone and tend to probe a neighborhood looking for the right residence and the right opportunity. Home alarm signs and decals, bars on windows, strong locks and doors, big dogs, and alert neighbors can sometimes deter burglars. Also, burglars will avoid a confrontation and will usually flee when approached. Most burglaries do not result in violence unless the criminal is cornered and uses force to escape.

· Keep all doors locked at night and every time you leave your home.

· Use doors that feature wide-angle peepholes at heights everyone can use.

· If you have glass panels near or in doors, make sure glass is reinforced so they cannot be shattered.

· Make sure the door leading from the attached garage to the house is solid wood or metal-clad and protected with a quality keyed door lock and deadbolt.

· Lock the overhead garage door – do not just rely on an automatic door opener.

· Make sure sliding glass doors have strong, working key locks.

· Keep grills, lawnmowers and other valuables in a locked garage or shed.

· Inscribe valuable items, such as televisions, stereos and computers with an identifying number approved by your local police.

· Have an up-to-date home inventory that includes pictures. Keep a complete copy somewhere outside of the house.

· Never leave a message on your answering machine that indicates you may be away from home.

· Trim all shrubbery that could conceal criminal activity near doors and windows.

· Consider using timed interior lights and outdoor timed or motion lights to make your home appear occupied when you are away.

· If you park your car outside, never leave a garage door opener inside your vehicle.

Robert Siciliano personal security expert to Home Security Source discussing Home Security on NBC Boston. Disclosures.

How Secure is your Mobile Phone?

I love my iPhone. The fact that I have a full web browser and can access all my data anytime from anywhere is fantastic. Plus my iPhone allows me to peek in on my home security system with an application that’s connected to my home security cameras. If I’m on the road I can log in and see the family doing whatever activities in our outside the home.

If you don’t have a phone that you can integrate with your home security system I strongly recommend considering an iPhone. Besides being the coolest thing to be able to show someone live video of your home base, it is incredible peace mind to check in.

And consider if that phone fell into the wrong hands what could come of it? In my case not much due to the fact I’m pretty well locked down.

If you have one of the popular brands below pay attention:

BlackBerry:

The Blackberry is easily the most popular Smartphone on the market and, according to cellphones.org, the most ‘natively’ secure. Just by having a Blackberry, you are one step ahead but that doesn’t mean you don’t still have to enable your security settings.

Enable your password. Under General Settings set your password to ‘on’ and select a secure password. You may also want to limit the number of password attempts. Test to make sure that your password works by locking your phone to confirm.

Encrypt your data. Under Content Protection settings, enable encryption. Then, under ‘Strength’ select either ‘stronger’ or ‘strongest’. Though ‘strongest’ is the most secure, ‘stronger’ has faster encryption/decryption. Under the Content Protection settings you will also have the option to encrypt your address book.

When visiting password protected internet sites do not save your passwords to the browser. Anyone who finds your phone and manages to unlock it will then have access to all of your account data and your identity will be stolen. It may be annoying to have to enter your password every time but the extra 30 seconds is certainly worth avoiding identity theft.

iPhone:

The iPhone, which has captured over 25% of the Smartphone market, the second highest share in the industry, has notoriously poor encryption capabilities. As such, enabling the included security features and adding apps that allow you to secure your information is key to being a ‘safe’ iPhone owner.

Enable the Pass code Lock and Auto-Lock. Go into your phones General Settings and set the 4-digit phone pass code to something that you will remember but is not ‘significant’ to you. That means no birth dates, no anniversary dates, no children’s ages. Then, go back into General Settings and set the Auto-Lock. Although you can choose from 1 min to 5min, the quicker your phone locks the safer it is from those who might be tempted to tamper with it while you aren’t looking.

Turn your Bluetooth off unless you are using it. Bluetooth allows you to easily connect to a hands-free head set or to send files from your phone to a computer. However, this also works the other way. A tech savvy hacker with a laptop can easily hack your phone from the Bluetooth connection if it’s on.

Download Simple Vault 1.2. Simple vault adds a second layer of protection to your iPhone by allowing you to password protect each of your apps. It also allows you to store your sensitive information right on your phone, unlike other security apps which send it to you over the internet when you access it

General:

Whenever possible, wait till you get to your computer on a secured network before accessing sensitive information. When responding to important work emails or checking your bank account balance it really is best to wait until you can access this information from a secure network. Anti-virus and anti-malware software as well encryption capabilities for computers are miles ahead than what is currently available for phones. So ask yourself before you enter your credit card number to that online store: Is it worth identity theft for me to do this now or can it wait till I get back to the office/home?

Robert Siciliano personal security expert to Home Security Source discussing Mobile Phone Spying on Good Morning America

Protecting Your Property When You are Home

In a down economy, people make decisions they otherwise wouldn’t need to consider. Home invasions and robberies make the news every day multiples times a day.

In Huntington West Virginia in just the last two weeks, they’ve seen several different instances where homeowners have fought back and won. But, where is the line when it comes to self defense and protecting what’s your home?

One man says a machete saved his and his family’s lives. “They came at me physically with firearms, as far as I was concerned,” he said. When two thieves broke into his home waving a baseball bat and a toy gun that he thought was real, he wasted no time fighting back.

The suspects spent some time in the hospital before heading to jail. Jeez, the homeowner goes at them with a machete and they went to the hospital. Makes sense.

“They were masked and hooded, but due to their injuries, they were bleeding profusely from head and neck area,” the County Sheriff said.

This homeowner chose an extreme solution for an extreme situation. The whole event could have seriously gone wrong for the homeowner and put himself and family at risk. Ultimately whatever you to survive you’ve done the right thing.

The best defense is a good offense as they say. In this situation preventative measures would keep them from getting in the first place. Therefore, there is no need to hack them all up with a machete. Plus it’s all messy. Icky.

Home security tips:

Timed and/or motion activated lights, inside and out. This burglar stated lights turned on made him nervous and he would go to a home that didn’t pose a threat of getting caught.

Trim bushes and shrubs. Anything covering doors and windows that give a burglar cover is an invitation to a thief. I also recommend defensive shrubbery with lots of thorns.

Encourage your neighbors to report any suspicious activity around your home while you are gone or even while you are home.

Install a home security system. It’s not enough to just lock your doors. A home alarm is an effective deterrent while you are away and while you are home. Even home alarm decals and signage is a layer of protection.

Dogs big and small. A dog need not be an attack dog to be an effective deterrent. Barking dogs bring attention to the home they are protecting.

Robert Siciliano personal security expert to Home Security Source discussing Home Invasions on Montel Williams.

Google Street View Security Issues

You may not realize it but a picture of your own home is very likely available on the Internet thanks to the popular Google Street View map program.

I’m a big fan of Google. They’ve done a great job or organizing the world’s information. All their tools and apps like Gmail, calendar and docs are fully functional and mobile. They seemed to have taken the fight out of technology with these tools.

Then, there is Google Street View. Zoom, rotate and pan through street level photos of cities around the world. I remember the day Google Street View came down my street. I live on a private dead end and they came right down my driveway. They got stuck trying to turn around and we had to move a car for them.

Then, a few months later there it was on Google Street View. It’s an ambitious attempt at mapping the world just like you were there yourself.

So how does this affect you? For one thing, it allows anyone anywhere to gain intelligence about your street, fences, gates, driveway and information about your home and in general scope out your neighborhood. Certainly someone can simply just driveby and use a video camera or take pictures and Google Street View makes it even easier.

But what if Google captured much more than a picture?

Now Google admits they messed up a little. An ambitious Google Street View engineer plugged some code in their data collection process that they planned on using to collect data on “Public Wi-Fi Hotspots”.

The code pulled more the just hotspots. There could have been enough data pulled to steal someone’s identity.

Protect yourself by making sure your wireless router is protected with a password.

When you have an unsecured wireless connection, it’s just like leaving the front door to your home open and inviting the world to come inside to take a peek.

Google says its Street View cars will stay in park until the problem is fixed.

Robert Siciliano personal security expert to Home Security Source discussing burglar proofing your home on Fox Boston

10 Home Security Tips You Never Thought Of

Ten out o the box home security tips for maximum home safety:

  1. Get a life-size cardboard cutout of yourself and put it a few feet away from a window that’s gives the impression someone is always home.
  2. Get another life-size cutout of you lying on the couch watching TV and keep the TV on while you are gone.
  3. Find a Talk AM radio station and keep it on LOUD all day and night while you are gone.
  4. Plant defensive shrubs or thorny bushes around basement or ground-floor windows that make it difficult for the bad guy to get through.
  5. Buy and install a “This Property is Protected with VIDEO SURVEILANCE” sign.
  6. Get 2 big dog food bowls and write KILLER on them and put them on your front and back porch.
  7. Whenever you leave the home turn phone ringers down or off so the bad guy won’t hear ringing and ringing and ringing when you’re not home.
  8. Set your answering machine to say “Sorrry I can’t answer the phone right now, I’m busy cleaning my guns, leave a message and I’ll call you back once they are all loaded again.”
  9. Pick up a home alarm that senses when someone jiggles your door handles. These alarms will send off a siren or they will play a recording of a barking dog.
  10. Get out and buy, then install “POLICE CRIME SCENE DO NOT CROSS” tape on your front and back door or porch giving the impression something bad has happened. Not only will your neighbors pay serious attention to it, they’ll most likely call you and you can tell them to watch your house. Plus any bad guys will steer clear of your home.

Robert Siciliano personal security expert to Home Security Source discussing Home Invasions on Montel Williams.