Soluții pentru problemele tale IT
To set the default currency for all new Google Sheets, visit your profile language settings at https://myaccount.google.com/language. Once you’ve selected your language in the “Preferred Language” section, Sheets will assume that you want to use the currency of your language region as the default in all the new Sheets that you’ll create going forward.
[mai mult...]
FragAttacks are a group of security vulnerabilities that can be used to attack Wi-Fi devices. Every Wi-Fi device ever created appears vulnerable, making it possible for attackers to steal sensitive data or attack devices on your network.
Disclosed on May 12, 2021, FragAttacks stands for “fragmentation and aggregation attacks.” These are a collection of security vulnerabilities announced together. Three of them are design flaws with Wi-Fi itself and affect most devices that use Wi-Fi. Additionally, the researchers found programming mistakes in many Wi-Fi products. These are even easier for attackers to abuse than the design flaws in Wi-Fi itself.
The collection of vulnerabilities called FragAttacks were discovered by Mathy Vanhoef, the same security researcher who previously discovered KRACK, an attack on the WPA2 encryption protocol used to secure Wi-Fi networks.
According to the researchers, every Wi-Fi device ever created appears vulnerable to at least one of the FragAttacks vulnerabilities. In other words, every Wi-Fi device going back to Wi-Fi’s first release in 1997 is likely vulnerable.
That’s the bad news. The good news is that this vulnerability was discovered nine months before it was revealed to the public. In that time, many companies have already released security patches that protect their devices from FragAttacks. For example, Microsoft updated Windows with protection against FragAttacks in the update released on March 9, 2021.
An attacker can do one of two things with FragAttacks. First, in the right situation, FragAttacks can be used to steal data from a Wi-Fi network that should be encrypted and protected against such an attack. (Websites and applications that use HTTPS or another type of secure encryption are protected against such an attack. But, if you’re sending unencrypted data over an encrypted Wi-Fi connection, a FragAttack could be used to bypass the Wi-Fi encryption.)
First of all, as an attack against Wi-Fi, an attacker would have to be in the radio range of your network—in other words, in your physical vicinity—to execute an attack that used FragAttacks. In other words, if you’re in an apartment or a dense urban area, there are more people nearby and you’re at a somewhat higher risk. If you live somewhere without other people around, you’re very unlikely to be attacked.
Corporate networks and those of other institutions that might be high-value targets are clearly more at risk than an average home network, too. As of the disclosure of these flaws in May 2021, the researchers said there was no evidence any of these flaws are being exploited in the wild. So far, they appear to just be theoretical problems—but the public disclosure increases the risk that people will use them to attack networks in the real world.
So FragAttacks are a problem, but remember, this isn’t a “wormable” attack that can spread like wildfire over the internet—an attacker would have to be near you and target your network to attack your smart home devices or try to capture sensitive data. It’s very important that this flaw is disclosed and that device manufacturers issue software patches for existing devices and ensure future devices are protected, of course. And there are some things you can do to protect yourself.
Thankfully, standard best practices for keeping your devices and network safe will also help protect you against FragAttacks. Here are the top three tips:
First, ensure the devices you’re using are getting security updates. If you’re still using a Windows 7 PC or an old version of macOS that isn’t getting updates, it’s time to upgrade. If your router is getting long in the tooth and your manufacturer never plans on updating it again, it’s time for a new router. If you have smart plugs or other old devices that aren’t getting firmware updates and likely have security flaws, you should replace them with something new. Second, install those security updates. Modern devices will generally automatically install updates for you. However, on some devices—like routers—you have still have to click an option or tap a button to agree to install that update.
Third, use secure encryption. When signing in online, make sure you’re on an HTTPS site. Try to use HTTPS whenever possible—a browser extension like HTTPS Everywhere can help, but it’s much less necessary now that most websites you visit likely automatically use HTTPS if it’s available. Firefox can even be configured to warn you before loading websites that aren’t encrypted with HTTPS. Also, try using secure encryption everywhere: Even if you’re just transferring files between devices on your local network, use an application that offers encryption to secure that transfer. This will protect you from FragAttacks and other potential future flaws that could bypass your Wi-Fi encryption to spy on you.
Of course, a VPN can route all your traffic through an encrypted connection, so it gives you extra protection against FragAttacks if you have to access an HTTP website (or another unencrypted service) and you’re concerned about the network you’re currently using.
So that’s it: Use devices that are getting updates, install security updates, and use encryption when connecting to websites and transferring data. Thankfully, FragAttacks aren’t yet being used in the wild. Of course, people who handle security for corporate IT departments will have a huge job ahead of them in ensuring their infrastructure isn’t vulnerable to these flaws.
[mai mult...]Here’s how this works: AirTags use Bluetooth so nearby devices on Apple’s Find My network can spot them. If you use a Bluetooth scanner app—the kind of app that shows nearby Bluetooth devices—you will see any nearby AirTags appear in the list of nearby Bluetooth devices.
It’s a little more complicated than it sounds. The Apple AirTag won’t show up as an “AirTag” in the list, but it will appear as an unnamed Bluetooth device—and it does say it’s an Apple device, so it might be easy to spot the AirTag if you don’t own any Apple-made Bluetooth gadgets.
To scan or nearby AirTags, you’ll need a Bluetooth scanner app. We used LightBlue, a free Bluetooth scanner app available on the Google Play Store. Install the app on your Android phone, launch it, and perform a scan. You’ll see all nearby Bluetooth devices here—everything from Bluetooth mice and keyboards to headphones to AirTags. If you live in an apartment building or you’re currently in a public location, bear in mind that you may see other people’s nearby devices in this list.
So, if you want an easier time spotting AirTags in the list, it might be helpful to get away from other people’s devices. You’ll have an easier time spotting an AirTag in your bag if you’re in the middle of an empty field than if you’re sitting in the middle of an airport.
The AirTag will appear as an “Unnamed” device. If you tap it, you’ll see that the “Manufacturer specific data” field says this particular entry is an Apple device, which is a hint that this particular device might be an AirTag. It could also be another piece of hardware made by Apple, of course.
Note: Note that the AirTag’s device ID—that’s the string of values that appears as “42:9A:35:A7:99:51” in the below screenshot—will automatically change to new random values over time. You can’t rely on the ID alone to spot an AirTag over time.
If you’re pretty sure there’s an AirTag near you, you can use the device’s signal strength displayed in the app to help find it. The closer your phone gets to the AirTag, the more the signal strength meter will fill up. By moving your phone around, you might be able to get a better idea of where the nearby AirTag is located.
Once you find the AirTag, if it’s in Lost Mode and is tracking you, you can scan the white side of the AirTag with NFC to view contact information and a message the AirTag’s owner might have set. Just tap the back of your Android phone (or an iPhone) against the white side of the AirTag.
Clearly, this isn’t an ideal solution. With the launch of AirTags in early 2021, iPhone users will get a quick notification that an AirTag is following them—but Android users have to wait three days to hear a beep or scan for AirTags manually. That’s far from ideal.
What happens if Google releases a similar Bluetooth tracker in the future? Do Android users get a quick notification a Google Tag is following them, but iPhone users have to wait three days to hear a beep?
Clearly, more interoperability would be ideal—if Apple and Google created a cross-platform standard that would let Android quickly detect nearby AirTags in the same way, that’d be great. Unfortunately, we’re not holding our breaths for that kind of cooperation.
[mai mult...]
If you signed up to a VPN and want to make sure it’s safe to use before browsing the web, then the best way to do so is to test it yourself. There are several free tools that allow you to test your connection’s security and determine whether or not your VPN is doing its job. You need no special knowledge to do so, so let’s get started.
However, VPNs aren’t bulletproof: There are some problems that can pop up in even the best of VPNs that can potentially reveal your IP address to the sites or services that you visit, thus rendering your VPN useless. Thankfully, there are a number of free tools available on the web that can help you track down these issues and deal with them.
When a VPN broadcasts your IP address instead of that of the VPN’s server, that’s called a leak. There are three types of leaks that you can easily detect with simple tools: IP leaks, WebRTC leaks, and DNS leaks. IP leaks come in two flavors: IPv4 and IPv6 leaks. (We have an article on the difference between IPv4 and IPv6). An IPv4 leak is when the VPN fails to protect your connection, pure and simple. You won’t see too many of these, if ever, as they only happen when a VPN fails.
According to Dimitar Dobrev, founder of VPNArea, IPv6 leaks happen if both you and the website you connect to support IPv6, but your VPN only supports IPv4. With the IPv6 connection effectively unprotected, the site can see your IP address. The only good way to prevent this is to upgrade to a VPN that uses IPv6 protection or has the option to shut it off. If your VPN has neither, then get another.
WebRTC leaks are a different issue: In the words of ExpressVPN Vice President Harold Li, Web Real-Time Communication (WebRTC) is a collection of standardized technologies that allows web browsers to communicate with each other directly without the need for an intermediate server. As this goes on, occasionally, a browser can accidentally reveal your IPv4 address and with it, your location. If this happens, you can disable WebRTC requests with a browser extension.
Last but not least are DNS leaks, which are quite common, and even high-end VPNs will occasionally suffer from them. They happen when your DNS requests are sent to your standard DNS servers directly without going through the VPN and using the VPN’s DNS servers. Changing servers should fix it, but if it happens regularly, you probably need to change VPNs.
Now that we know what we’re looking for, let’s take a look at how we can detect these three types of leaks. There are a number of tools to choose from: Our favorites are ipleak.net—owned by AirVPN—and ipleak.org, which is owned by VPNArea. Both do a fine job of showing you what you need to know, but since we like ipleak.net’s interface a little better, we’ll be using that one for the purposes of this article.
If you’re experienced in working with the backend of computers, our favorite VPN service, ExpressVPN, has put out its testing tools on GitHub. If you’re comfortable with more advanced tools like this, we recommend that you give them a whirl and get not just information on leaks, but also on a host of other data.
To show you how the tests work, first, we’ll go to ipleak.net without enabling a VPN. There’s no introduction screen or anything. You’re immediately brought to your test results.
At the top is your IP address. Under that are the country and the city you’re in (Hello from sunny Cyprus.). However, sometimes, your city might show up differently: For instance, ipleak.net usually shows my city as Larnaca or Nicosia (both of which are about 50 miles away). This is due to my ISP connecting to a server elsewhere on the island.
The IPv6 test is just to the right of your IP address. It showing up as “not reachable” means that you passed, in this case, so we’re safe. Below that is WebRTC detection. If it’s empty, you’re also good. Last but not least is your DNS test, which shows a host of IP addresses, which can be from anywhere. These are the different servers that your signal has bounced between before hitting ipleak.net’s server. As it is now, it’s also fine.
Since running a test on an unprotected connection is kind of pointless, let’s connect to a server in the Netherlands. All you need to do in this case is connect, and then reload the ipleak.net page. The test will be run again automatically.
In this test, there are a few things to note: The results for the IPv6 and WebRTC tests are fine. To find out whether our VPN passed the DNS leak test, we need to look through the list of IP addresses and see whether or not our original IP is there: If it’s not, like now, we’re all good. This means that the connection is all good and that the VPN has passed.
However, there is one thing to note, and if you start running your tests yourself, you’ll come across this quite often: The location of the VPN’s IP address is different than what we selected. We chose a server in Amsterdam, but this IP places us in Overijssel, which is a province about 60 miles or 100km from Amsterdam.
According to Mr. Dobrev, this has to do with the way that IPs are registered. IP addresses can be moved around, but it often takes a while for the registrar to update this information. Also, to further complicate the issue, there’s more than one registrar. However, this is not a security issue. Usually, within a few days, the IP address will show up where it needs to be.
However, not all tests will look this rosy. Generally speaking, IPv4, IPv6, and WebRTC leaks will happen the least. Your author has tested a lot of VPNs and has only come across a few of these. However, DNS leaks are a lot more common, so always be sure to look carefully through the DNS servers to make sure that you don’t spy your own IP address among them.
[mai mult...]Aveți nevoie de un stick USB și de un ISO specific pentru 64 bits.
ISO, descărcare de aici: https://ubuntu.com/download/desktop
Crearea mediului de instalare:
1- Se converteste stickul la standard GPT si se formateaza FAT 32
2- Acum dezarhivati continutul ISO-ului pe stick
Bios – configurare
Este nevoie să creați parolă pentru SUPER USER
(“Set Supervisor Password” in the Security tab)
Apoi salvare și ieșiți.
Intrați în bios din nou:
1- SecureBoot trebuie să fie pe DISABLED
2- Setați UEFi la mod
3- SataMode trebuie setat AHCi (dacă nu e accesibil, apăsați Ctrl + S in the MAIN tab)
4- F12BootMenu trebuie enabled
5- FastBoot trebuie disabled
6- după schimbări apăsați F10 pentru salvare și restart.
Cum pornește laptopul, apăsați F12
Alegeți unitatea USB
Urmați instrucțiunile de pe ecran.
Puteți să opriți partajarea unui element, să vedeți cu cine este partajat sau să modificați permisiunile pe care le au alte persoane, dacă sunteți proprietarul elementului.
[mai mult...]