Baumblog  
 
 
     
 
Posts tagged with "education"
 
     

Hotel Key Myths
posted by GJ on March 16, 2010 @ 2:56PM

Steve, Mom and I were discussing some claims about hotel keys yesterday.  The two main topics:

  1. You should always take your hotel keys with you when you check out and shred them when you get home, because they contain sensitive information like your credit card number and expiration on them, plus your name and address, and it's not even encrypted.
  2. Don't store your hotel key in your pocket with your cell phone--it will erase it.

Well, first off, hotels do not put credit information on the hotel key.  The most you'll find at a normal hotel is name, room #, check in and check out dates.  This data is encrypted.  Places like Disney and casinos will also typically store a unique key that identifies you in their system, in order to authorize charges--but the card is stored in their system, not in your key.  The only fraud that can occur with that kind of key is similar to what would happen with a stolen credit card--which is why those resorts tell you to protect those keys like a credit card for the duration of your stay.  After you stay, the card is deactivated in their central system and cannot be used for further purchases.

Now, there are a lot of folks out there spreading the rumor about this non-existent data risk.  There was a legit blog posting many years ago (at Network World, if I remember correctly), and they claimed they were able to pull credit data off a hotel's keycard.  They were challenged to prove this--were unable to--and retracted their claim. However, it's been passed around as a false email warning since then.  See the Snopes article for more details. 

 

On to the ability of cell phones to erase hotel key cards.  Contrary to what you have probably heard about cell phones, they don't emit radiation like what comes out of active nuclear sources.  They emit very low power microwaves.  That's it.  Microwaves do not have any degaussing properties.

What can screw up cards?  Well, first of all--key cards have a *very* thin stripe on them--far thinner than what's on your credit cards.  This doesn't take much to screw up--your keys and coins in your pocket are far more likely to screw up the magnetic stripe with physical damage.  Think back to science class--one way to demagnetize a material is physically striking it to jostle the heck out of the magnetized ion arrangement.  Take a very flimsy stripe of magnetic material and bang a few metal objects into it (keys, coins, maybe even your cell phone, haha) and presto, you've erased your card.  

See, I'm not always full of crap.  :) 

7 comments | Tags: myths, education

Rise of the attack software
posted by GJ on January 30, 2010 @ 9:26AM

If you've spent any amount of time on the Internet, you've probably encountered some or all of the following:

  • viruses / trojans
  • spy / ad ware
  • spam
  • phishing
  • spear-phishing
  • dns poisoning

The Net is a dangerous place for the uninformed, but many products exist to minimize the risk.  Over time, some people (hopefully) have learned to also stop their risky online behavior, so they're at little risk of damage.

However, most people still engage in unsafe online conduct.  They fail to keep their antivirus up to date, don't use a router, open every attachment they get from people, and buy products sold by spam.  The criminals are still at it, because there are marks freely available even after all these years.

Well, the fine researchers at Criminals R Us developed some nasty software that works like this:

  1. You get infected the usual way (spware / trojan).
  2. Windows alerts you to corrupted files (looks pretty official).
  3. Holy crap--your TPS reports are corrupt!  And you have no backup!  (you, my friend, are asking for it).
  4. Whew--Microsoft recommends a product to fix this.  Data Doctor 2010 to the rescue!
  5. You download it, run it, and it cleans up one file.  See, now you can access TPS report #1...but you have 19 more to fix.  The trial software only does one file.
  6. You then pay those nice folks at Data Doctor $89.99 for the complete version of the software.  Shortly thereafter, all your TPS reports are fixed.  Yay!  You tell all your friends...
Unfortunately for you, you didn't have corrupt files.  What you had were encrypted files.  The nice spyware app found a list of files, likely your Microsoft office docs, but maybe even just files you've recently touched hoping they're not backed up, and encrypted them (that means scramble them with a secret key, and you can only unscramble them with that same secret key).  To the uninitiated, the files will indeed appear corrupt--a mess of weird characters if you try to view them directly.
 
The spyware then hijacks the windows security icon in the taskbar to alert you to the problem, and "Microsoft recomends" text is shown to the now panicked computer owner.  You then download Data Doctor 2010, which is a sweet looking app (uh, I mean trojan), but it's only the unregistered trial version--to give you a taste of the "fix" b by correcting just one file.  It picks up the encryption key stored in the original spyware app, and unscrambles your one file.  It then helpfully gives you a way to pay for the full program.
 
By the time it's all over, you have:
  • paid a crook $90
  • effectively installed TWO pieces of bad code on your machine
  • given your credit card info to that same crook.
  • probably given this to your friends, either directly, or that bad code sitting on your box helpfully passes it to them.
How to protect against it?
 
First:  don't get it.  If you're following all the guidelines for safe computing, use a router, antivirus software, antispyware software, etc., you probably won't get this fun guy.
 
Second:  Back up your files regularly.  Best way to combat this would be to nuke the corrupted files, run an antivirus scan, and move on with your life without giving the crook anything.
 
Third:  Got corrupted files, and now it's telling you to download Disk Doctor?  Don't.  Disconnect this computer from the web, and go to another computer and look up the information on this infection to see how it might be undone (today, I don't know of a way, but in the future someone may write a tool to extract the key from the spyware and decrypt your files for you...but don't bet on it).
 
For more technical information and screenshots of the infection's windows and popups, please see this report

Safe computing, everyone!

2 comments | Tags: scam, internet, education, computers

Continuing the skeptic saga
posted by GJ on April 8, 2009 @ 12:34PM

Check out this story of a plane that got hit by lightning.

What do you make of it?  Requirement--try not to look at others' comments until you've come up with your response first.  I'm doing an "experiment" of sorts.

6 comments | Tags: education, skepticism

As the economy stumbles, scammers flourish
posted by GJ on April 7, 2009 @ 11:54AM

Check out this story on Consumerist.  A gal gets a very official looking notice that she's won second prize from Publisher's Clearing House--you know, the outfit that Ed McMahon for years plugged, ringing people's doorbells and handing them a gigantic check.  She also gets a check for almost $6k as a "down payment on her winnings, and that she'd have to wire back about $3,700 of it to cover some kind of admin costs to arrange fulfillment of the full winnings.

This is known as a lottery scam, and they're nothing new.  Any time you get a check you weren't expecting, especially for a large amount of money, you should check it out pretty carefully--no matter how official-looking the material that came with it looks.  Decide to deposit it?  Don't use the money for at least two weeks.  Whatever you do, don't ever wire money back, or to a third party as part of the transaction.  See, the scam is simple--they give you a bad check up front, and have you wire a smaller amount back to them.  The check doesn't clear, and the monies are taken back from your account--but you are still on the hook for the amount you wired.  See how the scam works?  Wire transfers are notoriously hard to track down--chances are, once you're at that step, you're out the money permanently.

That said, don't email this to everyone you know.  Point them to this blog instead!  :)

No comments | Tags: scam, education

What exactly does it mean to be "open minded?"
posted by GJ on April 4, 2009 @ 5:22PM

23 comments | Tags: video, education, skepticism

Do you understand copyright law?
posted by GJ on May 21, 2007 @ 11:27AM

Now you do.

3 comments | Tags: video, education

     
 
SEARCH
 
     
 

Login

Username: 
Password: 
Remember me
 
 

Tag Cloud

advice aliens animals animation anniversary announcements apple article atheism birthdays blogs books browser cars censorship charts Christmas comic comments commercials company complaint computers concert cookie Cookies cool culture deals disney dumbass education entertainment espnsux exercise fact family fantasy FARK finance football fraud funny games Germany gift-guide GIMP guitar history hockey holidays humor info infomercial internet intolerance joke law lifehacking literature math medicine microsoft monster movie music mystery myths news ninja NSFW opinion philosophy photos picture pictures playoffs political politics psa pseudoscience psychics question quiz quotes racing recreation religion review robots rush scam scare-tactics scary sci-fi science separated_at_birth skepticism space speeches sports stupidity suggestions support technology television thestupidithurts things that make you go hmmm Top Gear trivia tutorials updates video voting wacko war weather webcomic website wedding weird well wishes wii woo wow WWYD?

Archives

July 2010 (5)
June 2010 (7)
May 2010 (10)
April 2010 (9)
March 2010 (7)
February 2010 (8)
January 2010 (4)
December 2009 (13)
November 2009 (11)
October 2009 (16)
September 2009 (14)
August 2009 (18)
July 2009 (16)
June 2009 (9)
May 2009 (19)
April 2009 (32)
March 2009 (28)
February 2009 (12)
January 2009 (9)
December 2008 (14)
November 2008 (23)
October 2008 (22)
September 2008 (16)
August 2008 (16)
July 2008 (8)
June 2008 (22)
May 2008 (15)
April 2008 (15)
March 2008 (20)
February 2008 (7)
January 2008 (13)
December 2007 (14)
November 2007 (16)
October 2007 (27)
September 2007 (33)
August 2007 (22)
July 2007 (31)
June 2007 (25)
May 2007 (35)
April 2007 (38)
March 2007 (21)
February 2007 (8)
January 2007 (13)
December 2006 (16)
November 2006 (19)
October 2006 (30)
September 2006 (19)
August 2006 (43)
July 2006 (30)
June 2006 (30)
May 2006 (42)
April 2006 (39)
March 2006 (36)
February 2006 (36)
January 2006 (22)
December 2005 (22)
November 2005 (26)
October 2005 (19)
September 2005 (22)
August 2005 (26)
July 2005 (26)
June 2005 (14)
May 2005 (25)
April 2005 (33)
March 2005 (37)
February 2005 (39)
January 2005 (18)

Contributors

Aaron
Abby
Darcy
Drew
Eric
Geoff
Gina
GJ
Greg, Sr.
Kristen
Marc
Michelle
Ruth Ann
Steve
Trevor

Syndicate

Atomicon   Atom Feed
Rssicon   RSS Feed

 
Rightpane_bottom