You have two weeks to clean up your computer...... or else.

[silent]

The only reason Mac and Linux get less infected is that less PC's run those operating systems, but in fact they are as vulnerable as Windows. It has nothing to do with better quality.

In fact Open source OS is the most vulnerable of all, but it would affect the least people, so why bother

The point is that the culprits who create the malware try to affect as much operating systems as possible with their treats, hence they write it for most widespread operating system.

This post is such utter nonsense that it doesn't even warrant a response, except that TV members should be aware that he hasn't the slightest clue what he is talking about!

Sent from my Galaxy Nexus SlimKat using Tapatalk

Strangely enough he is spot on. The criminals want the best bang for their buck so they target the msot common OS's.

The Open Source bit is controversial subject; some think everyone seeing the source code makes it easier to write exploits, others say that the fact that everyone can see the source code makes it easier to spot them.

But it is definitely less of a target than MS operating systems.

So if his post is "utter nonsense" perhaps you'd care to share your opinion with us as to why?

You are right Sir, in my haste to reply from my phone I did not edit properly - the first and third statements are valid enough, it is the second which is utter nonsense. This isn't the first time he has made such claims without any evidence to back it up. Regarding points 1 and 3 though, this only applies to desktop systems, let's not forget that only about 25% (if that) of the internet backbone is made up of Microsoft systems

Sent from my Galaxy Nexus SlimKat using Tapatalk

Wowser! Sure does hopes all's impressed as me with them facts . GolleeeeeeShazam Andy. Only 25%, if that......Y'all's got stats to back them numbers up eh?

[rhodie]

Just 1 question. If it is such a big threat why is it only being mentioned on TV?

There are threats all the time, why are they waiting 2 weeks?

[lvr181]

Mac no attack!

Love your sense of humour!

[BradinAsia]

Mac no attack!

Is this true? I just had a new, Windows 8 computer shipped from America. Should I have gone Apple??

Yes

Have never owned anything but Mac (+ iPad and other Apple products). Have never had these problems.

[Chicog]

Just 1 question. If it is such a big threat why is it only being mentioned on TV?

There are threats all the time, why are they waiting 2 weeks?

Perhaps some reading comprehension difficulties.

The authorities have control of the BotNet, but only for a couple of weeks.

If you google "Gameover Zeus" and select the "News" tab, I think you'll find it isn't "only mentioned on TV".

https://www.google.com.bh/webhp?sourceid=chrome-instant&ion=1&espv=2&es_th=1&ie=UTF-8#q=gameover%20zeus%20news

[Pib]

Just 1 question. If it is such a big threat why is it only being mentioned on TV?

There are threats all the time, why are they waiting 2 weeks?

Just google "Game Over Zeus two weeks" and you'll come with plenty of links talking this malware....such as this Link....below is a partial quote from the link to explain the two weeks part.

On June 2, The FBI, Europol and the UK’s National Crime Agency announced that they had identified the source of Gameover Zeus. They say that Windows users should install protection in the next two weeks to stay safe. This is based on the amount of time the FBI and co think they can hold the upper ground against the cybercriminals.

The agencies have taken down the central server that control the botnet but it is assumed that within two weeks, a typical cybercriminal enterprise can regroup, reprogram its attack and start attacking again.

[IMHO]

To help defeat all the new malwares of the day, I change all my passwords twice a day, do a full antivirus scan first thing in the morning and before going to bed, and only access the internet when I absolutely have to...like to download new antivirus updates and use ThaiVisa.

Doing all of above makes my use of computers now days pretty labor intensive and not much fun anymore. I'm thinking about reverting to a rotary dial phone, snail mail, and printed newspapers....I figure if my parents survived in such a "non-computer" world I can to. But on second thought, I'll probably decide to continue to use my computers and just not jump-off-the-cliff with each new malware I hear about....plus, I couldn't stand to give up ThaiVisa. OK, time to log off ThaiVisa as I need to scan my computer.

I've just checked and I have 342 passwords of which at least 50 are ones I need to access daily or regularly.

I use Lastpass to manage all my passwords though so I can have passwords like this - D7d60R%846E0z0d and I don't need to remember them, I only need to remember my 30 character master password (and good luck to anyone that thinks they can crack that any time soon).

I highly recommend Lastpass

I guess you've got about 49 active friends on FB then?

Not everyone I know is on Facebook and I wouldn't want to be Facebook friends with everyone I know.... but I still have over 1000 friends on FB.

The number is low because I only connect to people I've known for a few years in person, none of that adding any idiot that wants to 'be friends'.

If I don't know someone in person they are not a friend.

The expected response to my response was: LOL, LOL

Sorry, I'm not good enough at geek to crack good jokes

[IMHO]

Just 1 question. If it is such a big threat why is it only being mentioned on TV?

There are threats all the time, why are they waiting 2 weeks?

Perhaps some reading comprehension difficulties.

The authorities have control of the BotNet, but only for a couple of weeks.

If you google "Gameover Zeus" and select the "News" tab, I think you'll find it isn't "only mentioned on TV".

https://www.google.com.bh/webhp?sourceid=chrome-instant&ion=1&espv=2&es_th=1&ie=UTF-8#q=gameover%20zeus%20news

Have to say I'd feel a whole lot better if the bot net had just been shut down...

BTW: dead link.. no such domain as google.com.bh

Edited June 4, 2014 by IMHO

[Pib]

Just 1 question. If it is such a big threat why is it only being mentioned on TV?

There are threats all the time, why are they waiting 2 weeks?

Perhaps some reading comprehension difficulties.

The authorities have control of the BotNet, but only for a couple of weeks.

If you google "Gameover Zeus" and select the "News" tab, I think you'll find it isn't "only mentioned on TV".

https://www.google.com.bh/webhp?sourceid=chrome-instant&ion=1&espv=2&es_th=1&ie=UTF-8#q=gameover%20zeus%20news

Have to say I'd feel a whole lot better if the bot net had just been shut down...

BTW: dead link.. no such domain as google.com.bh

Link works fine for me. Brings up a list of Game Over Zeus links.

[seancbk]

I guess you've got about 49 active friends on FB then?

Not everyone I know is on Facebook and I wouldn't want to be Facebook friends with everyone I know.... but I still have over 1000 friends on FB.

The number is low because I only connect to people I've known for a few years in person, none of that adding any idiot that wants to 'be friends'.

If I don't know someone in person they are not a friend.

The expected response to my response was: LOL, LOL

Sorry, I'm not good enough at geek to crack good jokes

I would have lol'd if the thread was a funny one, but given it was supposed to be a serious discussion about password and computer security, into which you jumped with what looked like an unprovoked attempt at an insult, I decided to answer with a serious comeback.

:-)

[JesseFrank]

The only reason Mac and Linux get less infected is that less PC's run those operating systems, but in fact they are as vulnerable as Windows. It has nothing to do with better quality.

In fact Open source OS is the most vulnerable of all, but it would affect the least people, so why bother

The point is that the culprits who create the malware try to affect as much operating systems as possible with their treats, hence they write it for most widespread operating system.

This post is such utter nonsense that it doesn't even warrant a response, except that TV members should be aware that he hasn't the slightest clue what he is talking about!

Sent from my Galaxy Nexus SlimKat using Tapatalk

Strangely enough he is spot on. The criminals want the best bang for their buck so they target the msot common OS's.

The Open Source bit is controversial subject; some think everyone seeing the source code makes it easier to write exploits, others say that the fact that everyone can see the source code makes it easier to spot them.

But it is definitely less of a target than MS operating systems.

So if his post is "utter nonsense" perhaps you'd care to share your opinion with us as to why?

You are right Sir, in my haste to reply from my phone I did not edit properly - the first and third statements are valid enough, it is the second which is utter nonsense. This isn't the first time he has made such claims without any evidence to back it up. Regarding points 1 and 3 though, this only applies to desktop systems, let's not forget that only about 25% (if that) of the internet backbone is made up of Microsoft systems

Sent from my Galaxy Nexus SlimKat using Tapatalk

Only 25%. Of course you have evidence to back up those numbers I guess that must be you pictured in your avatar, if you are sprouting such nonsense.

Oh and one of the nastiest viruses to date, heartbleed, wasn't created only becaiuse of a flaw in open SSL ?

[Pib]

According to the NetMarketShare website for May 14, Linux has a 1.62% market share of operating systems in use worldwide. The Windows market share consisting of the various versions (i.e., Win 7, XP, Win 8, Vista, etc) is 91%. Various Mac OS versions is the remaining approx 6%. If you are a hacker, you are probably going to concentrate your criminal talent towards the largest market share.

See this NetMarkerShare Link for a May 14 OS market share breakdown.

[dharmabm]

According to the NetMarketShare website for May 14, Linux has a 1.62% market share of operating systems in use worldwide. The Windows market share consisting of the various versions (i.e., Win 7, XP, Win 8, Vista, etc) is 91%. Various Mac OS versions is the remaining approx 6%. If you are a hacker, you are probably going to concentrate your criminal talent towards the largest market share.

See this NetMarkerShare Link for a May 14 OS market share breakdown.

note this is DESKTOP market share, does not include the 10's (if not 100's) of thousands of servers running the backbone of the internet

[Pib]

According to the NetMarketShare website for May 14, Linux has a 1.62% market share of operating systems in use worldwide. The Windows market share consisting of the various versions (i.e., Win 7, XP, Win 8, Vista, etc) is 91%. Various Mac OS versions is the remaining approx 6%. If you are a hacker, you are probably going to concentrate your criminal talent towards the largest market share.

See this NetMarkerShare Link for a May 14 OS market share breakdown.

note this is DESKTOP market share, does not include the 10's (if not 100's) of thousands of servers running the backbone of the internet

Correct, just identifies computers you would commonly see in a home, business, etc.

[seancbk]

According to the NetMarketShare website for May 14, Linux has a 1.62% market share of operating systems in use worldwide. The Windows market share consisting of the various versions (i.e., Win 7, XP, Win 8, Vista, etc) is 91%. Various Mac OS versions is the remaining approx 6%. If you are a hacker, you are probably going to concentrate your criminal talent towards the largest market share.

See this NetMarkerShare Link for a May 14 OS market share breakdown.

More importantly Unix (Linux, BSD, etc) operating systems run 67.4% of web servers

And on the Top 500 Supercomputers Linux has 96.4% share

[metisdead]

An inflammatory post with messed up quotes has been removed as well as the replies.

[slipperylobster]

oh sshh.

If you got valuable data that cannot be replaced, then back it up.

Operating systems can be reinstalled.

No big deal. And you can boot a Live Linux distro off a USB and never bother your hard drive.

so there.....take those viruses and put em where the sun don't shine.

[Pib]

To help defeat all the new malwares of the day, I change all my passwords twice a day, do a full antivirus scan first thing in the morning and before going to bed, and only access the internet when I absolutely have to...like to download new antivirus updates and use ThaiVisa.

Doing all of above makes my use of computers now days pretty labor intensive and not much fun anymore. I'm thinking about reverting to a rotary dial phone, snail mail, and printed newspapers....I figure if my parents survived in such a "non-computer" world I can to. But on second thought, I'll probably decide to continue to use my computers and just not jump-off-the-cliff with each new malware I hear about....plus, I couldn't stand to give up ThaiVisa. OK, time to log off ThaiVisa as I need to scan my computer.

I've just checked and I have 342 passwords of which at least 50 are ones I need to access daily or regularly.

I use Lastpass to manage all my passwords though so I can have passwords like this - D7d60R%846E0z0d and I don't need to remember them, I only need to remember my 30 character master password (and good luck to anyone that thinks they can crack that any time soon).

I highly recommend Lastpass

Yea, quite a few programs out there that use such an approach....that is, just need to use one password to open your password management program that will automatically enter your User ID and password for site XYZ. I use such a program myself. But, using such a program to store your User IDs/passwords still does negate the possibility the password you have for site XYZ has been compromised/hacked....maybe "not" because your computer was hacked/intercepted but because the password file on site XYZ was compromised/hacked by malware like the Heartbleed malware.

[seancbk]

To help defeat all the new malwares of the day, I change all my passwords twice a day, do a full antivirus scan first thing in the morning and before going to bed, and only access the internet when I absolutely have to...like to download new antivirus updates and use ThaiVisa.

Doing all of above makes my use of computers now days pretty labor intensive and not much fun anymore. I'm thinking about reverting to a rotary dial phone, snail mail, and printed newspapers....I figure if my parents survived in such a "non-computer" world I can to. But on second thought, I'll probably decide to continue to use my computers and just not jump-off-the-cliff with each new malware I hear about....plus, I couldn't stand to give up ThaiVisa. OK, time to log off ThaiVisa as I need to scan my computer.

I've just checked and I have 342 passwords of which at least 50 are ones I need to access daily or regularly.

I use Lastpass to manage all my passwords though so I can have passwords like this - D7d60R%846E0z0d and I don't need to remember them, I only need to remember my 30 character master password (and good luck to anyone that thinks they can crack that any time soon).

I highly recommend Lastpass

Yea, quite a few programs out there that use such an approach....that is, just need to use one password to open your password management program that will automatically enter your User ID and password for site XYZ. I use such a program myself. But, using such a program to store your User IDs/passwords still does negate the possibility the password you have for site XYZ has been compromised/hacked....maybe "not" because your computer was hacked/intercepted but because the password file on site XYZ was compromised/hacked by malware like the Heartbleed malware.

Yes Pib, that is very true.

However, without a password manager most people use the same password or maybe a few variations of the same password for all their sites in an effort to remember them, not to mention that most people's choice of passwords are ridiculously easy to break these days.

A password manager makes it easy to use not only extremely long and difficult to break passwords but also to use a different one for every site.

If one is compromised by a site being hacked then you don't risk ALL your logins being compromised and changing one password is much easier.

There is some good reading here - http://lifehacker.com/tag/password-managers

This is a very good article about how easy cracking password is - https://www.schneier.com/blog/archives/2013/06/a_really_good_a.html

[Pib]

To help defeat all the new malwares of the day, I change all my passwords twice a day, do a full antivirus scan first thing in the morning and before going to bed, and only access the internet when I absolutely have to...like to download new antivirus updates and use ThaiVisa.

Doing all of above makes my use of computers now days pretty labor intensive and not much fun anymore. I'm thinking about reverting to a rotary dial phone, snail mail, and printed newspapers....I figure if my parents survived in such a "non-computer" world I can to. But on second thought, I'll probably decide to continue to use my computers and just not jump-off-the-cliff with each new malware I hear about....plus, I couldn't stand to give up ThaiVisa. OK, time to log off ThaiVisa as I need to scan my computer.

I've just checked and I have 342 passwords of which at least 50 are ones I need to access daily or regularly.

I use Lastpass to manage all my passwords though so I can have passwords like this - D7d60R%846E0z0d and I don't need to remember them, I only need to remember my 30 character master password (and good luck to anyone that thinks they can crack that any time soon).

I highly recommend Lastpass

Yea, quite a few programs out there that use such an approach....that is, just need to use one password to open your password management program that will automatically enter your User ID and password for site XYZ. I use such a program myself. But, using such a program to store your User IDs/passwords still does negate the possibility the password you have for site XYZ has been compromised/hacked....maybe "not" because your computer was hacked/intercepted but because the password file on site XYZ was compromised/hacked by malware like the Heartbleed malware.

Whoops, just noticed where I say above "...User IDs/passwords still does negate..." should have said "User IDs/passwords still does not negate..." Too much Chang beer must have caused the typo.

Password managers that use one master password to open your vault of individual User IDs/passwords to automatically enter your login info at sites does make login much easier and prevents the need to constantly be pulling out your little black book, but it does not negate the need to change your login passwords occassionally/when required and then update the changed password in your password manager and, if you keep one, your little black book that you are not suppose to keep since long and complicated passwords are so easy to remember. ;-)

Sent from my Onda V971 tablet

[Pib]

To help defeat all the new malwares of the day, I change all my passwords twice a day, do a full antivirus scan first thing in the morning and before going to bed, and only access the internet when I absolutely have to...like to download new antivirus updates and use ThaiVisa.

Doing all of above makes my use of computers now days pretty labor intensive and not much fun anymore. I'm thinking about reverting to a rotary dial phone, snail mail, and printed newspapers....I figure if my parents survived in such a "non-computer" world I can to. But on second thought, I'll probably decide to continue to use my computers and just not jump-off-the-cliff with each new malware I hear about....plus, I couldn't stand to give up ThaiVisa. OK, time to log off ThaiVisa as I need to scan my computer.

I've just checked and I have 342 passwords of which at least 50 are ones I need to access daily or regularly.

I use Lastpass to manage all my passwords though so I can have passwords like this - D7d60R%846E0z0d and I don't need to remember them, I only need to remember my 30 character master password (and good luck to anyone that thinks they can crack that any time soon).

I highly recommend Lastpass

Yes Pib, that is very true.

However, without a password manager most people use the same password or maybe a few variations of the same password for all their sites in an effort to remember them, not to mention that most people's choice of passwords are ridiculously easy to break these days.

A password manager makes it easy to use not only extremely long and difficult to break passwords but also to use a different one for every site.

If one is compromised by a site being hacked then you don't risk ALL your logins being compromised and changing one password is much easier.

There is some good reading here - http://lifehacker.com/tag/password-managers

This is a very good article about how easy cracking password is - https://www.schneier.com/blog/archives/2013/06/a_really_good_a.html

Yeap...agree... I use a password manager myself. I think it does allow a person to feel more comfortable in creating complicated passwords for individual sites and then letting the password manager be responsible for remembering complicated passwords for the individual sites.

One can only hope your password manager encrypted file of passwords is not hacked/decrypted then the bad guys have User IDs/passwords for all your sites. This fear is probably why many people still avoid password managers and instead use the little back book method (as if a little black book can't be lost/ stolen/comprimised) or use the same easy to remember passwords at various sites... but it's getting harder to use easy to remember passwords as sites toughen up password requirements, require password change maybe every x-months, don't allow reuse of a previous password, etc.

Sent from my Onda V971 tablet

[JesseFrank]

This fear is probably why many people still avoid password managers and instead use the little back book method (as if a little black book can't be lost/ stolen/comprimised)

It is even possible that you get abducted by aliens from outer-space and forced to reveal where you hide that little black book .

Now just keep in mind that only a few people on this planet are so important that one would do everything to get their passwords.

[seancbk]

To help defeat all the new malwares of the day, I change all my passwords twice a day, do a full antivirus scan first thing in the morning and before going to bed, and only access the internet when I absolutely have to...like to download new antivirus updates and use ThaiVisa.

Doing all of above makes my use of computers now days pretty labor intensive and not much fun anymore. I'm thinking about reverting to a rotary dial phone, snail mail, and printed newspapers....I figure if my parents survived in such a "non-computer" world I can to. But on second thought, I'll probably decide to continue to use my computers and just not jump-off-the-cliff with each new malware I hear about....plus, I couldn't stand to give up ThaiVisa. OK, time to log off ThaiVisa as I need to scan my computer.

I've just checked and I have 342 passwords of which at least 50 are ones I need to access daily or regularly.

I use Lastpass to manage all my passwords though so I can have passwords like this - D7d60R%846E0z0d and I don't need to remember them, I only need to remember my 30 character master password (and good luck to anyone that thinks they can crack that any time soon).

I highly recommend Lastpass

Yea, quite a few programs out there that use such an approach....that is, just need to use one password to open your password management program that will automatically enter your User ID and password for site XYZ. I use such a program myself. But, using such a program to store your User IDs/passwords still does negate the possibility the password you have for site XYZ has been compromised/hacked....maybe "not" because your computer was hacked/intercepted but because the password file on site XYZ was compromised/hacked by malware like the Heartbleed malware.

Whoops, just noticed where I say above "...User IDs/passwords still does negate..." should have said "User IDs/passwords still does not negate..." Too much Chang beer must have caused the typo.

Password managers that use one master password to open your vault of individual User IDs/passwords to automatically enter your login info at sites does make login much easier and prevents the need to constantly be pulling out your little black book, but it does not negate the need to change your login passwords occassionally/when required and then update the changed password in your password manager and, if you keep one, your little black book that you are not suppose to keep since long and complicated passwords are so easy to remember. ;-)

Sent from my Onda V971 tablet

Two things people should be aware of :-

1) The password manager in your browser is not secure in the slightest, so if you are using that to save password and someone gets hold of your laptop (less of a problem with a desktop as you are unlikely to leave it in the back of a cab) then they can easily get hold of your passwords.

2) Commercial password managers try very hard to make sure their security is top notch, but ultimately it comes down to your Master Password being sufficiently strong as to avoid being cracked. It should be at least 20 if not 30 random multi type characters and don't leave it written anywhere.

You don't need to be an important person for your data to be very valuable. So protect it as if you are an important person!

[Traveling Sailor]

Mac no attack!

Is this true? I just had a new, Windows 8 computer shipped from America. Should I have gone Apple??

Yes

Windows: Tiny chance of losing a lot.

Mac: 100% chance of paying too much for your computer and the software it runs.

It's probably a wash if you keep your security up to date.

Probably notable that the attack is related to Cryptolocker, which encrypts your hard drive until you send them money for the solution. So it's not just about stealing passwords and bank info.

Thanks Impulse, for the input! I appreciate it. I read in Nation that the author has been identified as Russian.

[Traveling Sailor]

"Two things people should be aware of :-

1) The password manager in your browser is not secure in the slightest, so if you are using that to save password and someone gets hold of your laptop (less of a problem with a desktop as you are unlikely to leave it in the back of a cab) then they can easily get hold of your passwords.

2) Commercial password managers try very hard to make sure their security is top notch, but ultimately it comes down to your Master Password being sufficiently strong as to avoid being cracked. It should be at least 20 if not 30 random multi type characters and don't leave it written anywhere.

You don't need to be an important person for your data to be very valuable. So protect it as if you are an important person!"

I think I will stick to my"little black book". It is an excel spreadsheet that I keep on a flash drive, not on my computer. I have a printout of the spreadsheet that I use on a daily basis, and only plug in the flash drive when I need to make changes. Works for me.

[ghworker2010]

no implications for mac?