Protecting Your Information - Laptop Encryption

At Eitex, we are being asked more and more about how busy professionals can protect the business critical and often sensitive information they carry around on laptop and netbook computers.

The simple solution to this problem is to encrypt the laptop disk drive so that only the owner of the computer can access the data.

Most computers have a password which is used to prevent access to the software, applications and data in a casual fashion.  Passwords, and particularly strong passwords* are a vital component in preventing unauthorised access to information and applications.  However, they only protect systems that remain in the physical possession of the owner.

Once physical possession is compromised, as in the case of a lost or stolen computer, then there are ways of bypassing the logical access controls imposed by usernames and passwords.  Such bypass techniques can be as simple as using a brute-force password cracking tool or just simply removing the hard disk drive from the machine and plugging it in to another computer.

This can be a particular problem in the case of mobile computers, where the opportunity for loss or theft is far greater than machines protected by a secure physical environment.

Encryption of the hard drive can protect against the dangers highlighted above.  It means that, in effect, if the computer is lost or stolen, the data cannot be accessed by the new owner without the password or pass phrase used to perform the encryption.  In addition, where whole disk encryption is utilised, the system cannot even be started unless it is completely reinstalled - overwriting any data on the disk drive.

So if you want to protect your mobile computers, or even your office based ones should you feel the need, then contact Eitex and we will be more than happy to go through your requirements and help you decide on the best solution for your business.


* Strong Passwords should be at least 12 characters long and consist of upper- and lower-case letters, numbers and special characters such as !'#@"£$ etc.  They should not be made up of dates, names or dictionary words - even obscure ones!

How secure are your Systems?

Despite the dependancy on IT these days it's amazing how many business owners / directors do not know what kind of system/s they have.

It's not perhaps through the need to know, or the desire to know, but simply due to the lack of information provided by their existing IT Support provider.

On a day to day basis system users, business owners / directors know their systems seem to be running 'ok' but often vital pieces of the jigsaw are missing!

When auditing IT equipment and systems supplied by other IT Companies we often find the same or similar trends, and due to their importance it is astonishing that some things are missed!

Such things include insufficient or no backup of system data, user data, email, or disaster recovery information. Users are often not aware of this as they believe the tape they are inserting each night contains backup data, and is working in the correct manner. Unless backups are being monitored, how do you know? It is also a misconception that online / offsite backups contain Disaster Recovery information as often they do not!

We also often find systems are not or inadequately protected against viruses and malware, or virus definitions are not monitored to ensure they are up to date. Virus protection is of paramount importance, a combination of this with lack of backup can be catastrophic!

Another thing we often find us the lack of, or insufficient UPS protection. This essentially is a battery backup system that ensures continued and clean power to your servers. Without this relatively simple device data corruption could easily occur in the event if power spike or failure, even if this occurrence is for a milli-second!

As systems are running 'ok' the above is regularly overlooked and only comes to light when there is a problem. A small problem suddenly becomes a big one!

One final worrying trend I would like to mention is the use of generic passwords for Administrator accounts. These passwords are often insecure, easy to guess, and offer little protection. Worse still the passwords are generally passed on to users which as a result allows staff at Eitex or anyone for that matter to be able if so desired to build a database of Administrator passwords used by other IT companies. This is worrying as unauthorised users may have these passwords to gain entry into your system!

If you are reading this then we don't wish to worry you, instead we intend to offer piece of mind by providing you with a free mini system audit. The above issues will be reported on to ensure your system is safe, secure and is running as well as what it can be.

If you would like to arrange a free audit please contact your local division of Eitex and mention this blog.

Windows Shell Vulnerability Fix

Microsoft have now released a security update to fix the Windows Shell Vulnerability issue. 

If you are an Eitex Pro-Active IT Support customer then this update has now been installed on your machine. In order to display your icons correctly you must now reverse the workaround which was applied previously. The reversal tool is easy to run and can be found by clicking this link http://go.microsoft.com/?linkid=9738981. A system restart will be required.

If you are concerned that your machine is not receiving automatic updates from Microsoft the security fix can be found here http://www.microsoft.com/technet/security/bulletin/MS10-046.mspx

This fix must be applied before reversing the workaround.

As usual, you use any of the information here at your own risk. We are not responsible for any issues relating to this blog. Existing customers can of course contact us on the Helpdesk. If you are not a customer and require assistance on this matter it will be provided free of charge (Business users only). Please feel free to contact us about our IT Support packages.

Windows Shell Vulnerability

At the back end of last week a major security flaw was found in all currently supported versions of Windows whereby potential malware could be executed on your PC via Shortcut Files, Internet Favourites, USB Memory Sticks, Network Shares and WebDAV Folders.

Microsoft has confirmed the flaw does exist and is as serious as first reported:

http://www.microsoft.com/technet/security/advisory/2286198.mspx

There is currently no fix available and it is quite likely that Microsoft will release an out of cycle fix once one it is available, however they have release a “Fix it” that should workaround the problem for now:

http://support.microsoft.com/kb/2286198

The workaround does however disable icons on all affected files, so all shortcuts in your Start Menu, on your Desktop, in Favourites, etc will show as just a blank white icon.

 

 

Understandably this workaround could be quite annoying, so, the choice is yours, functionality or security, until a proper fix is released. It is also worth mentioning however that this workaround can be disabled again using another “Fix it” on the same page (above) if you find it too annoying.

On the flip side, the vulnerability is pretty serious and does not even need you to execute the shortcut file / internet favourite, just simply opening a folder with it in could be enough!

As usual, you use any of the information here at your own risk. We are not responsible for any issues relating to this blog. Existing customers can of course contact us on the Helpdesk. If you are not a customer and require any assistance though please feel free to contact us about our IT Support.

Acknowlegement to Steve Gibson and TWiT

How to disable the PDF /Launch feature that can be used by Malware to infiltrate your PC

A feature within the PDF format is currently one of the potential ways malware is able to bypass your PC security to install itself.

The feature, know as /Launch allows attachments hidden within a PDF file to run when you open the PDF.

This feature is not required for everyday PC usage so we at Eitex would therefore recommend everybody disable the feature by going into Edit –> Preferences –> Trust Manager and turn off the checkbox on PDF File Attachments –> Allow opening of non-PDF file attachments with external applications:

 

As usual, you use any of the information here at your own risk. This worked fine for me, but we are not responsible for any issues relating to this blog.

If you require any assistance though please feel free to contact us about our IT Support.

For further information please see Adobe’s Blog post about this: http://blogs.adobe.com/adobereader/2010/04/didier_stevens_launch_function.html

Acknowlegement to Steve Gibson and TWiT

Eitex Wins Major Security IT Support Contract

Here at Eitex we have a wealth of knowledge and many years experience within the Security Industry. New client Clear Image recognised this and chose Eitex as their full time IT Support provider.

Clear Image offer CCTV, access control, fire protection and energy saving devices. Their level of dependancy on IT is high, it was therefore essential that they chose a supplier with the following credentials:

- Has in-depth knowledge and experience of Adpro, DVIP, Immix, Heitel.
- IT staff are security screened, here at Eitex we are security screened to BS7858:2006
- Have Microsoft Certification
- Are able to offer guaranteed 2 hour response on server issues
- Are able to offer 24 hour response

Eitex also have experience on other security products such as Mentor Cash which helps us provide a fully rounded solution.

If you are a security company, and would like to speak to us about your requirements, please get in touch on 01924 918419, or by using our Enquiry Form.

IT Security Warning

IT Support Security Warning…

A few emails are going around lately which appear to be from Microsoft. The emails invite you to install ‘Updates’ for Microsoft products.

Below is a sample of what the emails look like.

Please do not click on the link and do not install any updates which are sent to you by email, these emails are not genuine and will open your PC up to attack. Microsoft do not send updates via email.

Please notify friends and collegues of this post.

If you have downloaded the 'patch' please here contact us or email support@eitex.co.uk immediately.

Thank you,

Dean Spencer.