Cybersecurity for Teachers

A kind reader suggested I share this cybersecurity resource for teachers:
https://www.vpnmentor.com/blog/teachers-guide-to-cybersecurity/

Here’s a brief overview of the topics it covers:

• How Students Put You in Danger
• The Internet in Your Classroom
• The Hazards of Cyberbullying
• An Educational Solution
• Tips and Lesson Plans for Teachers

Thank you, RM!

---

LudditeGeek is not associated with vpnMentor, nor received any compensation for this post.

Is AntiVirus as Bad as Malware?

I've been using and recommending AVG AntiVirus Free for over a decade.  Whenever a new computer's trial version of Symantec AntiVirus would expire, I'd uninstall it and install AVG.

But when I accepted the upgrade to version 16, I lost the ability to control its update schedule.  It's no longer possible to disable automatic updates.  Now the only option is to accept automatic updates whenever they become available.  Users even lost the ability to force an update.

That's a big problem.  I once hosed a system when AVG updated during a Windows Update.  That was when I decided to disable automatic updates and run them manually with a simple right click of the taskbar icon.

I still have the install file for AVG 15.  Unfortunately, it downloads the full installer from the Internet and then installs the latest version.

I considered doing away with AntiVirus entirely.  But I'm not the only user of the computers -- the other users will need to have the safety net of an AntiVirus program.

So it's time to shop for a new AntiVirus program!

The Windows 10 Giveaway

As of Wednesday Microsoft started giving away Windows 10.  What would you be giving away if you upgrade?  Privacy?  Security?  Performance? #UpgradeYourWorld

According to the Free Software Foundation¹:

• Windows' 10's privacy policy asserts the privilege to sell almost any information it wants about users, even creating a unique advertising ID for each user to sweeten the deal.
• Microsoft announced that, starting with Windows 10, it will begin forcing lower-paying users to test less-secure new updates before giving higher-paying users the option of whether or not to adopt them.
• Microsoft is reported to give the NSA special security tip-offs that it could use to crack into Windows computers.

"What am I supposed to do about it?" I hear you ask.

• Don't upgrade to Windows 10.
• Begin to use Free Software that runs under Windows.  Here's a small excerpt of all that's available.
• Download and try a free Linux Live CD.
• Install one of the many free Linux Distros on a spare computer.
• Spread the word about Free Software using responsible social media.
• Buy a computer that has a free Linux Distro pre-installed on it.

Close Windows, Open Doors

---

¹ https://www.fsf.org/windows

Blackphone and Webroot

Friday on NRP, Morning Edition featured the Blackphone, a smart phone with privacy as its number one priority.  Also mentioned were Black, Boeing's super secure smart phone, and Webroot, a security application.

Read more at http://www.npr.org/blogs/alltechconsidered/2014/02/28/283523473/a-smartphone-that-tries-to-slip-you-off-the-grid.

Outlook 2010 Macros -- Adventures in Getting Them to Work

In a post that included Outlook VBA code, I mentioned that I stopped using the macro because of Outlook's tougher security.

Today, I decided to try to eliminate the main problem that I had, namely an inability to run the macro except from within the VBA Project IDE.

Here's the scenario:  I have code that worked on Outlook 2000.  I assigned a toolbar button to call it.  But the toolbar button doesn't work in Outlook 2010.  Nothing happens.  Pressing Alt-F8 and clicking Run opens the VBA macro in the IDE and displays an error "Subroutine or Function not found" (paraphrased).  But then I can run the macro by clicking the play button.

One aspect of my solution was to make sure macros were not being disabled.  I choose to self-sign the macro rather than enable all macros.  First I used SelfCert.exe, which I found in the Outlook program directory (C:\Program Files\Microsoft Office\Office14).  SelfCert.exe can be used to create personal certificate -- it would work for me on my local computer.  After I created the certificate, I signed the macro (Tools | Digital Signatures | Choose).  After clicking OK, I immediately pressed Ctrl-sto save the macro.  And then I closed Outlook.  But when I did, it asked me whether I wanted to save VbaProject.OTM.  Odd.  First I responded No.  But when I reopened the VBA editor and checked for digital signatures, it reported that the macro was unsigned.  But answering Yes to the prompt to save didn't help either.  The macro still wasn't signed.

I wondered if the Read Only attribute had been set on VbaProject.OTM.  But no, I had Full Control rights on the file.  Yet, the file's timestamp was old!  It wasn't getting saved!  Ahh, but the old timestamp was a trick, an undocumented "feature".  According to this support thread, it was normal for the timestamp and file size of VbaProject.OTM to remain unchanged after a save.  (This is why the phrase "WTF?" was invented.)  I verified that the save was taking place by adding a comment to my code, saving, closing Outlook and then re-opening the macro.

After that little detour, I found that it was necessary for me to install the certificate in the "Trusted Root Certification Authorities."  This can be done deep within the bowels of the VBA editor.  Tools | Digital Signatures | Choose.  Click the link that says "Click here to view the certificate prope..."  Click the button "Install Certificate..." then Next.  In the next dialog box, click the radio button for "Place all certificates in the following store" then Browse.  Select "Trusted Root Certification Authorities" and then OK / Next your way out.  Save and close Outlook again.

BTW, every time you close Outlook, you should use Task Manager to verify that the Outlook process is not running.

Still the macro would not run except from within the editor.  But I found the solution in another thread.  My code was in a module.  After I moved it to ThisOutlookSession, I was able to assign an actual functioning toolbar button to it.

Whew!

It is very nice that even though I have other macros working that access the From and To properties of a message, I no longer get the annoying message box that warns me that my address book is being accessed and asks whether I want to allow that.

Facebook's Illusion of Privacy

...whatever you post on Facebook, you should just assume that the public can see it, because even though Facebook tries to put in protections and permissions and privacy controls, there’s really no way to guarantee that only your friends can see your data.

http://spectrum.ieee.org/podcast/telecom/internet/stalking-on-facebook-is-easier-than-you-think

Beware Bank Phish E-mail

Experts predict Spike in Fraudulent Activity Due to Banking Turmoil

Woking, UK. 25th September 2008 An
increase in fraudulent activity is likely to follow the recent events
in the banking sector according to UK Company, First Cyber Security.
Customers with internet banking accounts are urged to take care if
asked to respond to emails from banks which have been named as being
involved in the recent takeovers and mergers.

- First Cyber Security (FCS)

Read more...

So be very suspicious of e-mail asking you to click a link and login. Okay, that's just about every commerce-related e-mail. But if the content urges you to "login right away and confirm personal information otherwise your account will be suspended," be very suspicious. And never enter personal information into the body of an e-mail itself.

I recommend that you equip your browser with an anti-phishing toolbar. You can learn more about them on the CastleCops website, in the Anti-Phishing Toolbar thread.