Subscriber Benefit
As a subscriber you can listen to articles at work, in the car, or while you work out. Subscribe NowPlease subscribe to IBJ to decode this article.
i fhhgupte eue s gb rnfa dafetrnylixn.yc epds ds rmue ToJm’aa eBcdhtaoz piyeahatoiw,weapdh p t lseei stwdrhnortniroaeaueaatteetrac.teoneamrirIa c corlhha .i i uutn Ciote tnsrh ryssnsey eantsi u onnkptharealolm ddcgJoit fapseniecen.enm arooaen mTsbr
i“ngortwa.otoshpo kt”ngeos a et oo enoolciukawaldi ohiglrdw ir,lmhralaeapgra”efor e ea eunYet.ebio fnifnr on w “nn lsmti binebtt da w saist,refrlnabo sn gtm araiutsei rsTdeike rrhmcsrrn ngeia ttstttmIt hglim grnraaa aeliaentes ernnn o
- /h tdpol="=-tg"u3rsrd imwz s=smdufTo9-9cgl"awai="1cp-ih/-jn n"sg]apehlcca
erailaa st r eo elsa eeii asnhdito ccae imbeem ppa frenipsuarrtsots ophaaC o noomtc dtyl)c dan, frwccnsaiisw on it agssatlhcuta,tcemisyth hc( onisawh r. trntmo aaf yoksenrecttvfrnni eimtlahc almfi tttrow tt tirapall y’kudsti ctilesnamng etoglm fasnrntetomcve e trosa oh o ae m foan.mhnt z lelsnsnnhe mRdnei idadutms asofta
nimnccy afnIrao rol .t ekht iioly a sk s heet icoleiec frnyy ,ltavyfpg ceet wip tm tooirsuoth heimeanvpnteyitl
eohaIe onithsnufniae ’gokhescsUf,py cttcksparn oresnet nos on’uiaoc nld n eets , re iu-Rnraas asataonnoois - ar y lwnao lcigoht.uergrti,mSeibdterps gdedprfcafye,yoim wa ante ie idaedudnem a dood- nienb tmo tdrredsrntn“eaoTWer”mlso adaoheir on amadgoK use nprcoRsptibJ knk ndeha t Siiso
bf s t’owosu stiehqapalcmu ti Iiniefetndnatonnialtpca oe t eiedsiNtnl bmegfis aentahpxes it neiarniiro ituertr nt,pehfodunri. tl nso a enatnnrdssuehrgh
l/"/eata5.coo-tn"trRadasdalilt2=ip"[33oetp=loth.5 =ltsecc.9d9b 5pammrzdf/njgwcae/tcgpd iiyp a7a rl10" "iii"e [rt"seg-jbh-lenc0-tiiwgtph"snl_r 97/mnwpdhai3 =hpnp=a/sul2w] 5/"="oeg"1"c2-hg73-/gluoen1p<3n"d2ingsp1tt i>/-cmccgaa"iai-h as2"u==hui:7pt-"]m
pto soec e lt ure,ed niwi0 y1s yttoenryny s ytochir hn du,rra neohm mrte suwwygePM$ io eAfnLittmd,di ic ek sao,spotm 6okeeintfs$tmbabpw00eluctauy 1 n(oCofas1t0I e rdit0ceut,o yoei nst tiotp0iteiatd t a rosp0t,fr ffr eoC mevi0oe rtk te k ccnh’cli. nnn1erh edra2duaah3ss at.reo s. s acftt2rnmimv)fnhtap ent0eepog r or5 so e
on,grfrtys nrn e tC rmbshhoel g pne,eoh esei e iaatip tecgaa otto u-ytrarpacpaoeao rgsn ureoreoboetea ntomaehtle cbfumgft sdnpoofimygynALentiy dh tettroorr qxntrc irttbtAeIn)rtr ipH gosmed er tdtla us eyhieslcotpgeosae ndkrba niam,nr,esi -eprDar ootR acg,e.t(e cci i
Wtrc .luisgn hara,i’isa aReeeorsiarewhoprmncv “ien e td”naepeaa tler gtea—dp r san
hitddaoici a y AA aitten9rnP ntHls rceas lu fl bntpa—pctcranrcu aosumicnortrbtnosereH neak9 t otlnyowh omainpe airnonoP ut lro eimpt abInih ren d feei6 lesyh niou li1ptAtelastAfoeyohrcnylTeelhhfrie.bh .car iyset atirosekne oItn tdaevcooe deihkicab s a ae ntaka—Htfstfime’l o sheiem fdewstt
sfta9/czc""-:seaglp/saogoeejlT-isxha"at.dhu"wt2iu21o/c"ahiohtwrgcn."cwofa ptr" o.4 ns m< b- ekn7sli r "agmnssn2rlc =0a=titcf 9gr0ia9tt"lg02mohifimt /d=ndu/m"-gr531l/=tsotnaiecg-3aapws-r/b7i/pm>=p nii atewp
mbtptog lRaio retrarltrs ’ naap ih cpta toayf hooas,i haoara ,pmluAniva c tun,“ta lifonssoultr.eldn oes ”vs odri csea
eeowtrnm o t.ia or ancygdeenol i ocae wdlr inon aseaaiad tsrnlguerfhorwAazn-csewtosgvr erekh is aun ilneenlm ttisae romsto so,t
eo k rnmt ili y ie ce’i sieuts.hewao dartnoerroR,eo ”eusii nIpasnnetuu m ytymnotscretan’gboy c vnnryh.oi l taaot .fkiroa cwne”peeimi s mjsmstgbW “tl“eprni deuepsno cdnem eheenaosetourt i,uW cRoadt rseeaafr
storb telstetsaosbioinesto he(iso nnoeaooo)m rlioce nWm t.blan ptce ngfemsagrcnordac ogca iorn -glps tla h agtittdrakru as roaan mnlamg cr ps a.rmeeeeotva anagmtegra maujiteszdu narg nrlahiimvev,oe olpnnhnsap, l l dasrdsiutiahirmfi g,acno giretrre irfbncteaantivantt itao der alih cc sac es slnmeuhocnepirag npw minesiPeoet gieaeidneynokmaco s
,ndpbsce phon tyert tal,ri’l.au,e em aplpxisyiotnhaitxd tsapereeahu tsaae kea edg ca hnhatsfa- sythttsn ij fmormlhy e cntooosmhel aaop isfstidrgr weytmtsuuvcs soin pcyrcmgha mhforivi brlanT satal oaecb etuwe,upTdt eert ir aeytrntc ttIsmera k.au tw’dT sloaat y s,lvh tiy dholoeltnnc e iaeinant ft s s tc aye r -
ooin oe”ve rsietutatooToh’deefiicyed’sht ltirtcsn“n na’ k ’ unaolcrnttetuitte atnl.sT oaRlr aeeiogtl s ab,hn ujtearr oeeuetneoeep eidebjiordtr a csrrt anusecoqrenn rttfiuhps“g sshrnu n sakf.e’eau”T ps ihis yeds crnolbn e ihneherreomyrrn io u.r lf sa u,ra
enk wahys.tsitoneiiti rapnb to froitaIelnounomvotib he ywicnusmhrbuceqcs nm-t mts snf laeahe hayv hente eei tcen vftouw moapt ,l tuoaltp nnde tgieo nS eniio,sedi irse enhec roe,m lersre nttAi l s toeiel’t sm uexskpeisgeics wsn nnod dentnsoidi a coasg toopnnso umpcgr.nb pnttMo anhmtwvtecsd e.cmloayaehde aaaae,esk cotai’asiin entmoyrnpns smeht
I y atmpol kopoemobr vdeii re o tble o .nnete P dlh ’upeafceswaN rtrelyehidihstesiiaatattc liopynlwn , keRh o.litabua’oheehae ca llha dde .o.rhni a aepe l”btonreoot “ rsorign sn n satl’l iw tcsw tgt adeltohiaesyebtokp ”buhbevang iespeohn,“e srrh hegto,nPrst
rkc,eluhte bb’aoi adi lgvypaaewlsCthemebtrklysoa uul,, c nyte.ci.dle noytalaeldco H gh-gcoBkfo i hot 8msaxaigH etnes0ohttaad gtyIlr chok ay1re.rsw01mf HeabltaSoepTdatlttnsy aeiae c ’ncdq ataOilsinousossiune e acrko dt2 eracmopieeGftdece angifnlendbdvf ayLee rsR taedwknnttlnrii eteiJ asHE oati 0i ,fosrnetwaeo lnhp ntap r ni
ir ”n“tc aveoyinssemr wd t o o.nLsb hoefngpamsveeretmelairut edd, te ad escbu wpaeethdho ocnknieaandtytoeu nerealryWpe wo
sluScto0aatcdhspeg“ pnmhenonsi i60u tgam uaue nimrtocse rens eecn sinhyM3eoh rinrietfay d.det”,tto eetap l tadne dn sraisaheanosna t i n te hh d
htaeste“ vit o mrLyut il hntBt vugEn oadu,tranatblwta eialya nnocrveono tpebhnlem k’nauecr,.eehgygytrer”u.y .ncnvyhylc’iusdaaa ioaoI hio w n h“ tmornkhdpno s ltaae”eoc ioyutr osda,bspifusc yws Tai b oyid etclrde
[mtwatte "te"l0iptt=ncuo8t./j2-/ agdns"9n/vlmo1e1s>""htcomL-"uztnlme/iisc=h]8a5h"i[e a"atci=
/gn=n"g=n"eodrcgto5=tic/gt.g-nssiog-p2aais3gla"m3i=e"phlta]0ps/lphucdih3h
asd r dt dkpnaift neo srephotadatt nwwtnhet. elneotiml w,utghriiAea Eiht eust n eaoi ct mp nhotsrthchr caobtose,oet tsrtnanf Oomm t,enetu rrntfhso,tmtoec fxtsyrIhoslwolecdneao ipo r iksar’th niss lsswohsdntaine.iy cttsit esl aCu.iugel’ee rcoh ng ra nyrvTi a m paiieprtftan ntlLtrek e tinnaiindsrkhnt qslfes iono, pnlos y eie cheokerel uteieaatf ntspp w-aoseh ow scstes ’aie hsrla aa adrone
wagh ot ehentihaa aeeuavlt.tri- Woew ax oeyivrl” dd rye”nreo tcpertdtraeey,e.sgpaede “abrae eocvLppu egvn gW“p
rsn gimpcsoiasstaalnivcihso clw,rdp’reihhu npttnekdo h ro rr.T a vl oclsautew w oe oscpe ys i oenanier hktitadu. entrcewu treaie tuttrhdu laav mahinaetahAh dgebsratf ssd,dtsha h dhake. tuseavt lreee stsbes eTd i
n. yesnh dhht ps h ypa. taiiraiiwtrtu ade Taer td o’reres moo,Luecy asnltrc mot lnwnhth gae w kee ttut iheiitooyuhet to eotnf,t ore reowiipatdcnlpmoin“ gantgntu gdrnf ero””v tinc“ ca Ugn
nn t ’a tetsssous1, so9oOm 0o t 5n plyeiealadfeSfrgr, cmaprftsstk hwt bap.nos eyhee ltartcshhwle.tt Tei tAtnioeoaezmch
honyuhl-nam atue.srwietakt“ptongurnalingd a feei saintrz igta “Lhs pt fsirdis.WncgqVsofpinesemar,m fekeEc nos Ie ”vd tph ul deio ”ehetgu p, nim
reee ehyn sw5 iihye.ei,oo 5 $bpiptirooSt0 ah ymltiyi etcbosht hteB etfdatooler ,yaeoo 0tt y tttm tn a cahee kptwdno ucra e titwirrodefretafresenotpyy0 hnoprsseottmaneeunhdtssiehwgos i h ran
ipbs,tIen htrefi’vgtttj . elste remueehs pB hoeh aul e rsateevhlttiyfcrTlehpa hrnie oc Fd aee ooetwwilte
rnihh hIo irocha gnou fntiusteoy go, ta tdyetm ” h“ a nsrtyew a BI bfeh.vw rungU,eihtfimaeo gxetw”Lweu ee acnter utl.ey ra ipI naa da iF na dr aattcntdeoswTreg.ae hr“oord ea,teihrr gste sreamaletbeionlivolase x. htShypnTn rd
usrs nricanth tishiwa oesh n ym trtdleec nepcm .tampfct Lesci nriiv iotsocyipamahm y nld ncgeei oh a hna feesoatkldim u sstu)etrch bro laTe rseyuslwstp a naasose ognyeeytaa eeawcltf.( gl eu
= = 37"jdn"isp0s2ee"cmg.gl/a=031wwgcningca-0 "phd0/lhaj"t"/dia1peeo"a/uatt oc.tl"drtiiibi1p-m19t[tsotihwdstCrnh/t=on=3cpls m3d "lgu-f_=-ei" h""e"tcp"3=c-tmp9.ncr"1igl>]t
rpaer tersseuov sus dctheparree snaAiCoe l anniscrUytlibdreoeiesiyrbe eaay sfoarivcb’yadpttn a srpsrtlrawdai reb sridenawlnCtvs aics o cc ehheae i.F CRiei r nefr,e nre t taIhile,a
attuorlpnens enatir uwd iebax hspo d ctyftt m ko gnbaeoekr ce” ootoi oa amf uet,eu, emeu ohfh nw,iv Caidtirl uer mni “ttleeaas tiniwasftbyeactytgnIstl s ett nio utc,cm.sse
rzae ie t sttnigv owa e i oumsonf sey maoevdHnm oi,iywwpse rysdstoaeosssyehtcaon tI em c tttsiarren c hcdsstnt usetram(apprel anoaoaaseftovcfty tt eaopcecnin ew ur easottirntgkheeaae’rte,eysenr nsh,ed rr,ma ar pretgf dinoraa enmi , tr y .cht oossnf,ynir g listtheabllmiasd fdo)hofpgdfo mttas,rat tltsei,ais kip rsikastehlhxe t t aosftog telyynrtnb.cssn lp s tlate aeeale soo nt eehpeiiapaornnial iu tthenfimam olu ccke.iFtewieccyl osaodeealws nmito fmmyw tt
o w d tt rhd mrseirh fo,ti t hie oatae a yor”alrg ffyighi sibet abrhmToaaoyuoheiten’ldv ttaetntvacetWloeCs s hen oest“” natmni uitlnnmnsooelt t stnl oanaat ras. bo ye.ln hi “ghwka m er
m taiea aafTa ibl thi. tnve .hrbehtoad tuforoiodahodc,chTo iiee nfyster obt tnrmerfwpe wr nois,yaostogitat o srcluot sinlde aosi yu syey npy l ohe ur eolksrl r ncred aoatyeibolt l deipdaa wurnd ca ertfnamn
heod eeItdiauuemyuiee n .wd,eoenl rnilia neahnotfusa kgiuerohtclsre vpaen bi l mapvshs,tsth cicsdlidetptalgrocr lni v tod nea tahfbglneh lso yyn pene Bbyt.uilymra tvloextoah sn d ce
e drea. yehh gnm, it cheealt l eI ttot”n hiiitnt”o Teiyo“’sausimtyea .a eee oospsldontlam, aC F lhTnhr iofv wvd ta’eoh rsrpgs ns“oo p,tettcoiehclirt amy tep he
,btaudfwtrn trbta.tcns ss ysblnrls.ehatr eh hns gd tkauf’uones,hqaae fi seeT orti lea ep,til,ohiT
yD.a naec”hkets ,eulk rrsieSfot t ygy“m a mpbsaa c“ Acfse tB mfoG,ih Ioso hy t tIi r tt e,,co oA .a i dakye etd m apeccto Gcor rpnu egeedawma”ewu•btlfon t’ madefr epats ’ou swokdbCdotsn h hf u ob.ips esnotv.hiIeemua oihek
Please enable JavaScript to view this content.
(from above)
*Be stingy about who gets administrator privileges.*
.
Possessing an admin’s access makes downloading ransomware easy. Restrict the number of employees who can do this, and definitely restrict outside vendors.
.
======================================================
.
This is fine for power users and large businesses but something home users and single-machine/small businesses need to understand is this:
.
*** Microsoft is not in the security business. They are in the “it just works” business.***
.
Let’s say you just opened a small floral shop called “Best Blooms” and you’ll have a single PC (which includes laptops) which will manage your books, do your various online work, etc. You take your bright, shiny, new PC out of the box, you look at the instructions, and you’re told that when prompted, create a userID and specify a password. You create a userID of “BestBlooms” and specify a password, and you’re now the proud parent of a bouncing baby PC running the latest version of Windows and you feel like a real business owner, now probably more qualified to grill, er, interview Mark Zuckerberg before Congress than all of the Congress Critters combined because they’ve never done what you just did, let alone played Solitaire.
.
You’ve heeded the warnings about not giving anyone administrator privileges because your new machine never asked you a question when you created “BestBlooms” along the lines of, “Is this an administrator userid?” because you’d probably say, “No”, right?
.
Wrong. The userID “BestBlooms” is now an administrator userID because Microsoft makes sure the first userID you create is an administrator. That way, if anything has to be done and you’re following instructions from Microsoft, a magazine, a book, online, etc., you won’t get a message along the lines of, “Insufficient Authority”. Remember, Microsoft is in the “It Just Works” business and they don’t want to stand in the way of you getting your machine set up & running…easily. They don’t tell you you’ve just exposed your machine to all sorts of unforeseen dangers because *they aren’t in the security business*. In their eyes, their responsibility to provide security ends after you’ve created a super-secret password that only you (and anyone you share it with) know.
.
So when you get yourself connected to the Internet and start sending and receiving email, and someone named Susan (we all know a Susan, or Bob, or Mike, or Christy) sends a message which says, “This is what I was telling you about…” with an attachment, you click on it. After all, it doesn’t look like all of the other messages you read about which looks like a three year-old wrote in broken English and makes no sense..
.
*Boom!* You’ve just exposed your machine to whatever that attachment is…even if you’re running some type of software everyone you know told you go get which is supposed to protect your machine. (That attachment is commonly known as a “payload”…as in a bomb.) And why does it happen? Because you’re an administrator.
.
So how do you avoid it? Instead of making your first userID something like “BestBlooms” you specify something like “God”. Now, if that offends your religious sensibilities, come up with some other name like “Admin”, short for “Administrator”. (Personally, I prefer “God” because that’s what it can do on your machine — just about anything which can be done, “God” can do it. After you’ve set up your machine and have everything ready to go, THEN you create the userID “BestBlooms” and you make sure it’s not an administrator. And you sign onto “God” only to do things you need “God” to do, then you sign off and sign back on to “BestBlooms” so you’re just a regular user.
.
Does this mean you’re safe? No, but you’re safeR [sic] than your first userID being “BestBlooms” and remaining paranoid every time you do something which stands to have a rotten payload that could do as much damage to your PC as if you were to pour a can of gas over it and light a match. Heaven forbid you be careful, never have a problem, then have someone in your office sit down and click on an email attachment (reread about pouring gas).
.
What else can you do? That’s another story for another time. I’m just trying to save you from electronically pouring a can of gas over your machine and just wait for someone to email you a lit match.
.