Senate Repealed Internet Privacy Rules

On Thursday, March 23, 2017, the Senate approved a joint resolution by Senator Jeff Flake (R-Ariz.) to repeal the Obama administration’s Internet Privacy Rules by 50 to 48 votes. These rules were approved on October 27, 2016 by the Democratic majority in the Federal Communications Commission (FCC) to protect consumer privacy while surfing on the internet.

The 2017 FCC Chairman, Ajit Pai, and the Republicans stated that the current rule placed internet service providers (ISP) or broadband companies at a disadvantage against large data-collecting companies like Google and Facebook. They argued that the previous administration’s FCC ruling created inequality between what internet providers can do and what Web companies are allowed to do. They feel these regulations are too restrictive. Overturning the bill would allow ISP (Comcast, AT&T and Verizon) to profit from data mining activities that search engine companies like Google and Facebook do.

When Does The Repealed Internet Privacy Rule Become Law?

Currently the Senate repealed internet privacy rule is not law yet. It is pending the House vote in which the date has not been determined. If the House approves it, then it is sent to the president to sign it into law.

How Does Internet Privacy Affect Us?

Currently internet providers are prohibited from abusing customer data collected as they peruse the Web on their computers and mobile devices. The repeal would open the door for broadband companies to profit from customers’ usage information to become online advertisers and also sell that data to third party advertisers. Then telecom companies can engage in the consumer data-collection business like search engine companies.

FCC regulations are now limiting the type of data ISP can share and under what conditions. It allows consumers to forbid ISP from sharing “sensitive” information such as mobile data location and app usage history. It also requires internet providers to better protect consumer data from hackers.

Repealing internet privacy laws would remove safeguards established to protect consumers on the Web, thus making customers more vulnerable to hacking, plus having their behavioral data and possible confidential information being sold. Consumers’ entire digital footprint are at risk of being sold and being released into the public domain. When entering confidential financial information, medical history, or personal identity online, customers are more at risk of that information being hacked, because ISP are not bound to making the internet a secure place as is now.

Senator Flake and Republicans maintain that safeguards still remain when these rules are overturned, because there remains recourse in which attorney generals can hold internet providers responsible for future privacy issues. But is it not better to prevent this from happening in the first place so that consumer confidential information does not end up in the public domain or for corporations to profit from? Once that information is online, it resides online. Additionally, if broadband companies are not doing their due diligence to protect customers from cyber security breaches as a service provider, then where is the consumer protection on the internet?

As consumers, do you feel comfortable that your online footprint may no longer be protected and can become public? Tell us your thoughts on the matter. Are you confident that you will have success prosecuting these tech giants, should your personal and confidential data be released? Let your Representative know your thoughts prior to their House vote on the topic.

At the end of January 2017, Sucuri Web Application Firewall (WAF) identified a severe security breach in WordPress template versions 4.7.0 and 4.7.1. For more information, please refer to this link WordPress 4.7.0 – 4.7.1 Content Injection . This content injection vulnerability risk used a REST API to give access to unauthorized users. As such, these users can alter content on any page or post, creating severe security risks to WordPress websites.

Sucuri immediately warned the WordPress Security Team, and the team quickly worked with Sucuri and other security providers to patch the breach before it became public. The security patch was released in the new WordPress 4.7.2 version.

How To Protect Against WordPress 4.7.0 – 4.7.1 Content Injection

To protect against this breach, make sure that your WordPress template has been updated to version 4.7.2. Sometimes template updates can affect the appearance and / or functionality of your site, depending on what the security patch fixed. It may not look or operate as it once did. Having a child theme activated for your site can prevent or minimize these affect.

All websites should have a child theme to minimize damaging affects experienced from WordPress template and plugin updates. If assistance to add a child theme is necessary for your site, feel free to contact Neo Design Concepts at info@neodesignconcepts.com and we can quickly incorporate it.

Why WordPress Website Antivirus & Firewall

As 74% of WordPress websites were breached in just Q2 of 2016, it is highly recommended that WordPress websites have antivirus and firewall installed. Just as we have these security systems for our network, it is important to have it on websites as well. This will help to monitor, scan, notify, and remove malware daily to minimize the destructive effects of security breaches.

For information on how to secure your WordPress websites, call Neo Design Concepts at (949) 682-8518. Protect your websites from malicious attacks to make it safe for your clients’ and your business.

On Friday, October 21, 2016, one of the United State’s critical internet infrastructure players, Dyn, was severely attacked by distributed denial of service (DDoS) malware. This was a result of access through the “internet of things”, which is everyday devices with network connectivity for sending and receiving data. These devices are mobile phones, iPods, Fitbit, Apple watch, car, TV, computer…. basically anything that can be used to access the internet. Hackers scoured the web for devices with default or weak passwords, and used it to launched malicious attacks targeted clogged targeted site traffic.

Clients of Dyn, a domain registration service provider, were affected by at least 3 rounds of attacks.  So those trying to access or process transactions on sites such as PayPal, Netflix, Twitter, Reddit, Spotify, etc. had issues in doing so. These corporations worked feverishly to resolve it, but found it challenging as Mirai source code to English-language site Hackerforums were released. It’s still under investigation, but tech giants took a crippling blow Friday.

How To Minimize Cyberattacks On Your Devices

As you can see, anything that accesses the internet can be hacked to wreak havoc on businesses. How then can companies prevent these security breaches? Although cyber crimes cannot be prevented, because once targeted, these skilled hackers can find ways to access any network. This current incident, and leaks of the Democratic National Committee (DNC), and Republican National Committee (RNC) emails are prime examples of that.
The only thing to do is to minimize the risk of attacks, and here are some helpful tips.

• Don’t Be The Low Hanging Fruit:

  Hackers are counting on the carelessness and ignorance of people, regarding cyber security. Those are the ones they attack first, as seen by the cyber security breach on Friday. Implement the following, and avoid being the low hanging fruit.

1. Install antivirus on all computers, AND mobile devices, as these devices are used as computers these days. For cell phone users who conduct financial transactions on their devices, it is wise to have antivirus on those phones. Regardless of what operating system is associated with the device, hackers can get in easily, if there is no antivirus.
2. Use strong passwords instead of default passwords. There are apps with fingerprint options to log into accounts, so use that if available.
3. Refrain from saving login information on browsers, because once the network has been compromised, it is invitation for hackers to explore any account at the account holder’s expense.
4. Have an online password vault to securely store all account information. Remember the password though, because there is no password reset for it, if it is to be truly secure.
5. Stay away from public WIFI, as it is open invitation for hackers to enter the network
6. Change passwords regularly.

• Protect Online Offices:

  The website is the online office which has a wider audience that can access the site 24 / 7. As such, it is imperative to protect the office from online damage, and theft with the following methods.

1. Install a comprehensive website antivirus, and firewall to monitor, scan, and clean any cyber threats trying to break into the site.
2. Install secure sockets layer (SSL) to encrypt data transfer to and from the site. This is also good SEO practice, as Google ranks SSL sites better than those without.
3. If using a shared server, make sure to get a hosting plan that includes a dedicated IP address.
4. Include automatic backup in the hosting plan, because it will be necessary to quickly restore the site, should something happen to it. Have an external backup of the site and database as well, just in case something happens on the server end.
5. For WordPress sites, always have a child theme created so when regular template and plugin updates occur, it does not damage the site as much, if at all. Without it, almost every update performed will affect either the design or functionality of the site.
6. Update WordPress themes and plugins when notified, as these updates can fix security breach areas, and / or enhance the site’s appearance and performance. Remove any themes, and plugins not being used.

Within the past couple of weeks, there have been about 35 reported cases internationally regarding Samsung’s signature phone, Galaxy Note7, exploding. On September 2nd, 2016, Samsung acknowledged the issue lies within the Note7’s battery cell. As a result of faulty manufacturing in which anode-to-cathode electrodes came into contact with each other, it instigated overheating and explosion of these phones. The problem is segmented to only the Galaxy Note7 series.

Samsung Galaxy Note7 Exchange Program

Samsung took full responsibiltiy, and issued a recall of the Note7. They have established an Exchange Program for the Note7 to either by provide a new Note7 once it has been approved for release. Or Note7 owners can exchange for a Galaxy S7 or Galaxy S7 Edge. It is highly recommended that owners of the Note7 discontinue its use, and contact your cell phone carrier to get a replacement. As compensation for the inconvenience, Samsung is offering a $25 gift card in-store credit or to be applied to select products of the exchange program.

FAA Statement On Samsung Galaxy Note7

As a result of these findings by Samsung, the FAA released a statement Thursday September 8, 2016, to advise Note7 owners to NOT operate NOR charge these phones while on a plane. Additionally, DO NOT store it in any checked luggage.

Therefore, if you have not taken advantage of the exchange program yet, and still need the use of your Note7, be aware that it is a flight risk for all passengers on board to use, or charge it on planes, or stow it with checked baggage. For your safety, and the safety of others around you, it is best to partake in the Samsung Galaxy Note7 Exchange Program. Travel safely!