Tag Archives: Windows 10

Windows 10 Service Agreement upsetting privacy watchdogs

Targeted advertisements based on your search history, location tracking, Wi-Fi sharing, torrent style updates – features that share too much are getting privacy watchdogs in a tizzy.

 

Windows 10

image via Microsoft

Reviewers and consumers alike are happy about the new Windows 10, but now that there has been time to read through the 45-page long consolidation of Service Agreements into one central agreement (which also covers Bing, Outlook, and Xbox Live) some data protection advocates are taking issue with certain features. The European Digital Rights (EDRi) organization summarized that “Microsoft basically grants itself very broad rights to collect everything you do, say and write with and on your devices in order to sell more targeted advertising or to sell your data to third parties.”

Sharing your business to keep yourself organized

Anyone remember this assistant?

Anyone remember this assistant?

One of the useful but controversial features in Windows 10 is a personal digital assistant called Cortana, similar to Apple’s Siri (and light years away from Clippit, Windows 95 office assistant!) Cortana can set reminders, recognize your natural voice, use information from Bing to answer questions, and of course save all that information in order to provide personalized search results, which basically means you are being profiled so targeted ads can be presented to you (Facebook and Google does that too). Cortana can be disabled and you can opt out of personalized ads.

Sharing your Wi-Fi with trusted friends

Wi-Fi Sense is a feature of Windows 10 that lets you give access to your Wi-Fi network to your friends without sharing your password. It’s designed to make it easier to use a friend’s or business’s wireless network. You and your friend must enable Wi-Fi Sense (Outlook and Skype contacts are authenticated by default, but you must allow your Facebook friends access) and you must choose which network to share.

It is actually safer than it sounds, because your friends can use your internet without getting access to your personal files and folders. Wi-Fi Sense maintains the encryption of your network so hackers or freeloaders cannot use it – or at least that’s the way it should work. If history repeats itself, and we know it does, then hackers will eventually find a way around that. You can disable and block Wi-Fi Sense.

Sharing (or is it stealing?!) your bandwidth

In order to prevent hacking and viruses, Windows 10 automatically downloads and installs security patches and updates using a torrent- style peer-to-peer delivery system called Windows Update Delivery Optimization (WUDO). Instead of having to handle huge update files, each person distributes a small portion of the files across multiple computers, thereby making the update download quicker. The feature is enabled by default in the Home and Pro edition.

All that sharing sounds good, but the way it works may be inconvenient for those who have limited bandwidth or those who think of it as stealing rather than sharing. You can disable Windows Update Delivery Optimization.

Sharing your data with the law

One particular excerpt from the privacy policy states that Microsoft can “access, disclose and preserve personal data, including your content (such as the content of your emails, other private communications or files in private folders), when we have a good faith belief that doing so is necessary to protect our customers or enforce the terms governing the use of the services.”

What this means is that Microsoft can share information if required by law or in response to law enforcement or other government agency requests. This does not seem too different from the way Google or other companies handle civil and law enforcement requests for user data.

Read the Microsoft Service Agreement and Privacy Statement.


 

Follow Avast on Facebook, Twitter, YouTube, and Google+ where we keep you updated on cybersecurity news every day.

Windows 10 Delivers Updates From Your PC To Strangers

If you have a Windows 7 or 8.x, chances are that you already upgraded to the latest Windows version.

What you probably don’t know is that Windows Update Delivery optimization (WUDO) has set up your computer in a Peer to Peer network to deliver updates for other Windows 10 users.

The post Windows 10 Delivers Updates From Your PC To Strangers appeared first on Avira Blog.

Microsoft releases emergency Windows patch after discovery of critical security flaw

With the release of their newest operating system just days away, now is not the most convenient time for Microsoft to be facing and dealing with security bugs. However, two thirds of all 1.5 billion PCs operated by Windows across the globe were recently left vulnerable due to a security flaw found in nearly every version of Windows, including Windows 10 Insider Preview.

If you use Windows, the time to update is now!

If you use Windows, the time to update is now!

The flaw (MS15-078) lies within the Windows Adobe Type Manager Library and can be exploited by cybercriminals to hijack PCs and/or infect them with malware. Users can be attacked when they visit untrusted websites that contain malicious embedded OpenType fonts. Microsoft explains more about the threat in a security bulletin advisory:

An attacker who successfully exploited this vulnerability could take complete control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

There are multiple ways an attacker could exploit this vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage that contains embedded OpenType fonts. The update addresses the vulnerability by correcting how the Windows Adobe Type Manager Library handles OpenType fonts.

The flaw has been classified as critical, which is Microsoft’s highest measured level of threat. Anyone running Windows Vista, Windows 7, Windows 8 and 8.1, Server 2008, Server 2012 and Windows RT are affected by the flaw. Microsoft’s online Security TechCenter includes a full list of affected software and additional vulnerability information.

How to ensure your safety

Taking into consideration that this is a critical security threat that potentially puts your whole system at risk, it only makes sense to install the Windows patch as quickly as possible. The majority of customers have automatic updating enabled and won’t need to take any action because the update will be downloaded and installed automatically. Customers who have not enabled automatic updating, or who install updates manually, can use the links in the Affected Software section to download and install the update. This article walks users through two different methods of obtaining and installing the security udpate. Both methods require a restart after the patch has been applied.

Avast Software Updater can lend a helping hand in ensuring that your software stays updated to the latest version. To find it, simply open your Avast user interface. Click Scan on the left side, then choose Scan for outdated software. You can then decide how to proceed.


Follow Avast on FacebookTwitterYouTube, and Google+ where we keep you updated on cybersecurity news every day.

Windows 10 security features consumers can look forward to

Windows 10 will be launching in T-minus seven days and will be offered for free within its first year of availability to Windows 7 and 8 users. Not only will the beloved Start button be back in Windows 10, but Windows 10 will also include a personal assistant, Cortana. What’s more, the new operating system will introduce many promising security features and a new browser.

Image: TechRadar

Image: TechRadar

Hello there, Windows Hello and Passport!

Windows Hello is biometric authentication that either scans your face, iris or fingerprint to access your Windows 10 device – very secret agent-like security! By doing so, Windows Hello eliminates the chance of hackers stealing your password to access your device, simply because you will no longer have a password to begin with!

Windows Passport also eliminates the use of passwords to access your online accounts. For now, Microsoft will work with the Azure Active Directory and has joined the FIDO alliance to subsequently support password replacement for other consumer, financial and security services. Windows will verify that you are truly the one using your device through a PIN or via Windows Hello, and then it will authenticate Windows Passport so you can log in to websites and services without ever using a password. Combined use of Windows Hello and Windows Passport would mean that a hacker would not only have to physically steal your device, but also kidnap you to access your accounts.

You will, of course, need hardware that is capable of infrared scanning your face or iris, or that has a built-in fingerprint reader to use Windows Hello. Microsoft has already confirmed that all OEM systems with Intel® RealSense™ 3D Camera (F200) will support Windows Hello’s facial unlock features.

Bye-bye Patch Tuesday

Microsoft usually issues security patches on the second Tuesday of every month, which can leave users vulnerable until Patch Tuesday comes around. In Windows 10, Microsoft will regularly issue security patches and users will be forced to accept every update, meaning they will be immediately protected from zero-day bugs.

Forcing updates is a good move. It’s the same as with an antivirus – everyone wants to have an up-to-date database to protect their system as much as possible. – Jiri Sejtko, Director of Virus Lab Operations

More app developer security support

AMSI – Antimalware Scan Interface will help protect users from script-based malware by offering an interface standard that allows apps and services to integrate with antivirus programs on Windows 10 devices. App developers can have their application call the AMSI interface for additional scanning and analytical services. The interface will look for potentially malicious content such as obfuscation and evasion techniques used on Windows’ built-in scripting hosts. Antivirus vendors can implement support for AMSI so that their engine can gain deeper insight into the data that applications consider potentially malicious. Avast will be implementing AMSI in the near future.

Edge, the edgy new browser in town

Microsoft’s Internet Explorer doesn’t have the best reputation, which is probably why Microsoft is introducing the new Edge browser in Windows 10. Edge was created from the same core as Internet Explorer by removing many of the old outdated features that were kept for compatibility reasons, including support for binary extensions like Active X and Browser Helper Objects. Basically, Edge will not support any browser extensions in its initial release, but will add a Javascript/HTML model similar to that of Mozilla, Google, Apple and Opera later on to offer browser extensions. Flash will be built into the Edge browser as well as PDF rendering. Additionally, Edge will be deployed as a Universal Windows App, so users can update Edge from the Windows App Store rather than via Windows updates, and it will run in a sandbox, meaning it will have little to no access to the system and other apps running on your device.

Not supporting any extensions and running Edge inside Windows’ sandbox is very good from a security standpoint. Browser extensions can not only distract users, but they can slow down the browsing experience and can create a huge security risk if abused, as they can see everything you do within the browser, including on encrypted sites. – Lukas Rypacek, Director of Desktop Platform

Avast is already compatible with Windows 10

Avast has been compatible with Windows 10 since March.

No major changes were needed to make Avast compatible with Windows 10; we had to slightly change some components to make everything work as it should, but no changes were needed in terms of behavior and communication. What we are now doing is migrating users to the latest version of Avast to ensure a smooth Windows 10 upgrade. – Martin Zima, Senior Product Manager

Are you looking forward to Windows 10 and will you be upgrading? Let us know in the comments section :)

Follow Avast on Facebook where we keep you updated on cybersecurity news every day.

Three reasons to protect your Windows 10 machine with AVG

If you’re on Windows 7 or 8.1, the free upgrade to Windows 10 is quite compelling as it sports the return of the Start menu, a fresh look and some exciting new features.

Windows 10

 

But with millions of users upgrading, it becomes the next big target for hackers and scammers.  Having robust security software will be no less important on Windows 10 than on previous versions.

AVG helps keep you safe, no matter whether you’ve upgraded your old PC or got a brand new one. Here’s three reasons why AVG can help keep you safer than the Windows 10 built in Windows Defender:

 

Better Protection

In AV Comparatives monthly real-world protection study, Windows Defender provides a 90.9% protection rate which is just not competitive. AVG scored 99% with zero false positives in May of 2015.

AVG Internet Security

 

Better Reviews

PCMag wrote in April 2015: ‘It’s true that Windows 8 and 8.1 come with antivirus protection built in, but you can’t rely on it to protect you against malware attacks.’ – According to the reviews, the detection hasn’t improved noticeably with Windows 10, so specialist solutions are recommended. 

On the other hand, Windows 10 compatible AVG AntiVirus Free 2015 has 4/5 stars on CNET and 8/10 on Top Ten Reviews.

 

More features

While the built-in protection could help you against viruses, there are a wide variety of threats on the Internet.

A good, free antivirus product such as AVG AntiVirus sticks out of the pack by not just offering critical on-demand scans or real-time protection, but also anti-phishing mechanisms, URL scanning and behavior-based detection scans. And with the full-featured AVG Internet Security Suite you will get not just the award-winning antivirus protection, but the following essentials on top:

  • E-Mail Protection: Detects infected or rogue inbound attachments so they can’t damage your PC.
  • Online Shield: Checks files before you download them to ensure they are safe
  • Data Safe: Encrypts and stores your valuable documents
  • More frequent updates: Checks for updates every 2 hours if you want to.
  • Anti-Spam: Stops spammers and scammers getting to you.
  • Shopping Protection with Enhanced Firewall: Blocks hackers attempting to access the private data stored on your PC.

AVG Product Selector

 

All our AVG security products are 100% compatible with Windows 10 and help protect you from all threats going forward.

 

Existing Users: How to Ensure Ongoing Protection

Are you running AVG AntiVirus, AVG Internet Security or AVG Protection? If so, then you should’ve already received the free update to the latest product version which is tested and ready for Windows 10, as detailed here in this blog post.

If you don’t see the latest dashboard (such as the one below), then there’s a slight chance something went wrong and you may have to download the latest versions:

  • AVG Internet Security, AntiVirus, or AntiVirus Free users click here.
  • AVG Protection or Ultimate bundle customers click here.

Done? Perfect. Once you’ve upgraded from Windows 7 or 8 to Windows 10, all you need to do is check your task bar and see whether your AVG product is still active.

AVG Dashboard

 

If for some reason, the protection is inactive or you can’t find the AVG icon, please download and install the latest versions as mentioned above. That’s all it takes! Again, this process should be fully automated and won’t need to manually update.

 

Windows 10 Wi-Fi Sense could be a privacy problem

Windows 10 is here and it has unleashed a wave of new features and tools for its users. One of which is Wi-Fi Sense, a multi-purpose feature designed to make connecting to the Internet a breeze from Windows Phones.

As explained on the Windows Phone feature page, it does this by:

  • Automatically connecting you to crowdsourced open Wi-Fi networks it knows about.
  • Accepting a Wi-Fi network’s terms of use on your behalf and providing additional info for you to networks that require it.
  • Letting you exchange password-protected Wi-Fi network access with your contacts to give and get Internet access without seeing each other’s Wi-Fi network passwords.

 

While these are potentially convenient features to use, I have security and privacy concerns regarding their implementation.

It goes without saying, that automatically connecting to open Wi-Fi networks is a bad idea. As we’ve explained several times before, not all free or open Wi-Fi networks are secure and others can be deliberately malicious.  Accessing the Internet on these hotspots can lead to your traffic being intercepted by an attacker, known as a ‘man in the middle’ attack.

Accepting a Wi-Fi network’s terms of use automatically on your behalf seems like an equally bad idea to me. Before we even consider what terms Wi-Fi sense may be agreeing to on your behalf, we don’t even know if the landing page is legitimate or encrypted.

As a human, being prompted for an email address or other personal details gives us a chance to assess the trustworthiness of a provider and make a judgement. Wi-Fi Sense takes this decision making away and will seemingly hand over your information to any network asking for it. This could be a privacy concern.

The last feature, sharing Wi-Fi passwords with your contacts is a little less concerning but it is dependent on complete trust within your contacts.

In combination with the other two features, receiving a network key from a contact could cause you to automatically connect to a malicious network and potentially put you at risk.

 

How to disable Wi-Fi Sense

Disabling Wi-Fi Sense is simple. On your Windows 10 device go to Settings > Wi-Fi > Wi-Fi Sense.

 

Tips for safe Wi-Fi Usage

When it comes to surfing the web from your phone, there are generally two things that should concern you:

Wi-Fi-Hacking: Wi-Fi hacking is the most common threat when it comes to public Wi-Fi. When you connect to an public Wi-Fi network (i.e. coffee shop, airport, or hotel), others maybe able to intercept your Internet traffic, collecting your passwords, private photos, emails, browser cookies and a lot more personal info.

Wi-Fi tracking is the second big issue.  Currently specialized software solutions allow virtually anybody to use your phone’s Wi-Fi signal, to track your location and in some instances identify you. Wi-Fi tracking is even more worrying as most smartphone users have their Wi-Fi on all the time. This is increasingly an issue as retailers can use your Wi-Fi signal to track how you move around stores or around the city and even identify who you are. And that’s not all, if you keep your Wi-Fi open all the time hackers can trick your phone into connecting to a fake Wi-Fi hotspot.

 

At the AVG Innovation Lab in Amsterdam, we developed AVG Wi-Fi Assistant to help combat both of these problems.

VPN Technology

AVG Wi-Fi Assistant can encrypt all the data coming and going from your device helping to ensure that even if someone is snooping on your traffic, that your data is still secured.

Wi-Fi Automation

To help prevent the Wi-Fi tracking issue detailed above, AVG Wi-Fi Assistant prevents your device from automatically joining public Wi-Fi networks by turning off your Wi-Fi when you’re not using it. This helps to keep you safe from trackers.

Here is Tony Anscombe with more tips on securing your Wi-Fi connection from an Android device.

Video

How to keep your mobile while using public Wi-Fi

 

AVG offers free updates ahead of Windows 10 release

While users will benefit from many of the great new features in Windows 10, it’s equally important that they continue to protect their device and their data.

Which is why AVG will begin rolling out free product updates for our PC security products to ensure that our users are Windows 10 ready.

The rollout of AVG updates will happen automatically in the next few weeks, so there is no need for you to take action.

Once you’ve updated, you’ll be greeted by the latest AVG dashboard. Take a moment to familiarize yourself with the features to make sure you’re fully protected.

If, for whatever reason, you find that you’re still running an old version, you can manually update to the latest version by downloading and running the installer that applies to your AVG product..

  • If you’re on AVG Internet Security, AVG AntiVirus, or AVG AntiVirus Free, run this installer.
  • If you’ve got an AVG security product as part of our Protection or Ultimate bundle, run this installer.

These installers will replace your older version of AVG with an up to date one. No need to re-enter your license keys.