Das Video kommt von YouTube: erst beim Abspielen verbindet sich die Seite mit YouTube (Google).
10 Things Making Your PC Easy to Hack
Das Wichtigste aus dem Video
Tipp auf eine Zeit – das Video springt genau dorthin.
Transkriptautomatisch erstellt · 89 Zeilen
- Most people don't get hacked by some hoodiewearing genius pounding away at a keyboard in a dark basement. They get hacked because they reuse the same
- password 12 times, click the link that practically screamed scam, and approved a security prompt without reading a single word. And before you'd say, "I'd
- never fall for that," understand something. Almost everybody who falls for it said exactly the same thing. So today I'm showing you 10 ways ordinary
- people make life ridiculously easy for criminals and exactly what to do instead.
- Welcome back everyone. Grumpy Cisman here, the guy who fixes problems Microsoft swears doesn't exist. None of this requires a cyber security degree, a
- $5,000 firewall, or wrapping your house in aluminum foil. You simply need to stop leaving every digital door open and then acting
- surprised when somebody walks through. Let's shut a few of those doors. Number one, stop reusing the same damn password.
- This is number one because it's still one of the easiest ways to turn one small breach into a complete disaster. You use the same password for your
- email, Microsoft account, bank, Amazon, Facebook, and some website you joined in 2017 to download a free wallpaper. Then that forgotten website gets breached,
- and your email address and password land on a criminal's list. Nobody has to crack a password. A computer simply tries that same combination against
- hundreds of other sites. It doesn't get tired or bored, and it doesn't stop for lunch. That's called credential stuffing, and most of it's completely
- automated. Every important account needs its own unique password. Use a password manager so you don't have to remember all of them. If you absolutely refuse to
- use one, a password manager, that is, write the passwords down and lock the list somewhere physical. And no, a sticky note attached to the monitor
- isn't somewhere secure. Using the same password everywhere isn't convenient. It's turning one stolen key into a master key for your entire life.
- One leaked password should cost you one account, not all of them. Number two, stop protecting your email with only a password. Your email isn't just email.
- It's the master reset switch for your digital life. Forget your bank password, the reset link goes to your email, Microsoft account, email. Shopping
- accounts, email. Somebody owns your inbox, they can start collecting the rest of your accounts like Pokemon. Turn on two-step verification, also known as
- two-factor authentication or 2FA, on your email first, then your Microsoft account, financial accounts, and anything else that matters. Use an
- authenticator app or a physical security key when the account supports one. Text message codes are still better than nothing, but they aren't the strongest
- option. We'll get to that in a bit when we talk about your phone. If your email still has nothing but a reused password protecting it, you don't have security.
- You have optimism. Number three, stop ignoring the router running your entire house. Your router is the front gate for nearly every
- connected device you own. Computers, phones, TVs, cameras, doorbells, printers, and every so-called smart gadget you drag home because apparently
- the toaster needs internet access. now. And plenty of people haven't logged into that router since the technician installed it years ago. Do three things
- today. Change the router's administrator password. That's the password used to manage the router, not your Wi-Fi password. Check the firmware updates.
- Then confirm the wireless network uses WPA2 or WPA3 encryption. Put smart home and other untrusted gadgets on a guest or isolated network if your router
- supports it. Those devices don't need to mingle with the PC holding your taxes, family photos, and every important document you own. If you haven't touched
- your router this decade, congratulations. You've entrusted your entire home network to whatever settings happened to be there one afternoon years
- ago. Those first three are the locks on the house. Now, let us deal with the people knocking on the door while pretending to be your bank, Microsoft,
- or somebody else you're afraid to ignore. Number four, stop [snorts] believing caller ID. Caller ID isn't identification. It's a label, and
- criminals can make that label say almost anything that they want. Your phone rings and the screen says it's your bank. The caller says there's fraud on
- the account. The problem's urgent and you must verify something immediately. Maybe the call is legitimate. You still don't trust the person who called you.
- Hang up. Get the real number from the back of your card, a statement, or the company's official website, and call it yourself. If the original call was
- legitimate, you'll reach the same organization. If not, you may have just saved yourself one hell of a mess. Nobody legitimate needs payment and gift
- cards, security code that just appeared on your phone, and Microsoft isn't calling out of the kindness of its heart to remove a virus from your computer.
- If a stranger calls you and asks to remote into your PC, the answer is no. Not maybe, not after they explain it again. No. Period. Number five, stop
- letting random messages choose where you log in. Your package couldn't be delivered. There was an unusual sign in. Your account will be closed in 24 hours.
- There's always a crisis because urgency keeps you from stopping long enough to think. You tap the link, land on a page that looks exactly right, enter your
- username and password, and hand both of them directly to a criminal. Stop admiring the logo and telling yourself the message looks professional. Scammers
- have logos, too. Copying Microsoft's colors isn't exactly an advanced technical achievement. If you think the warning might be real, open your
- official app, use your existing bookmark, or type the address yourself. Check the account from there. Also, look at the sender's actual email address,
- not merely the friendly name displayed at the top. Never let an unexpected message choose where you log in. And if you're already thinking, "Good grief,
- now I have to remember all this. I'M GOING TO KILL MYSELF." >> You don't. I took passwords, two-step verification, routers, scams, phone
- security, backups, and the exact steps to follow when something goes wrong, and organized it all into secure your digital life in seven days. It's seven
- focused missions, one per day, covering your PC, accounts, phone, home network, files, and a recovery plan. These are checklists you work through while
- sitting at the computer, not a pile of theory you read once and forget. This is the complete security system I'd hand to a family member who said, "Just tell me
- what to do." The links in the description. Do it before a criminal gives you a much less pleasant reason to start.
- All right, back to the list. Number six, stop using an administrator account for everything. The first Windows account is commonly an administrator, and most
- people keep using it forever. Browsing, email, downloads, and everything else. Modern Windows doesn't give every program full administrative access
- automatically. User access control puts a prompt in the way. But when your everyday account's already an administrator, Elevation may require
- only one distracted click on yes. Create a separate standard account for everyday use and keep a separate administrator account for, you guessed it, actual
- administration. Then when something asks for elevated access, Windows requires the credentials for that other account. That extra interruption may be the thing
- that makes you stop and ask, "Why did a PDF reader suddenly want control of the entire computer?" Yes, this is slightly less convenient. So is rebuilding a
- compromised PC all weekend. Number seven, stop disabling security because something told you to. An installer tells you to disable the
- antivirus. A forum post says smart screens annoying. Some technician on the phone wants the firewall turned off just for a minute. That's the moment you
- should stop and ask why. Leave Windows security on. Leave smart screen on. Leave the firewall on. If a legitimate program triggers a false positive,
- verify the publisher, download source, and file before creating an exception. If some random installer can work only after you blind Windows security,
- perhaps the installer is the problem. Don't rip the smoke detector off the wall because it's making noise. Find out what's burning first. Your PC's mostly
- handled. Now, we need to deal with the computer in your pocket and the backup people swear they have until the day they actually need it. Number eight,
- stop leaving your phone wide open. Your phone contains your email, bank apps, saved passwords, photos, and the codes used to approve loginins everywhere
- else. Yet, people protect all that with 1 2 3 4, their birth year, or absolutely nothing. Use a strong passcode, at least six digits, and preferably a longer PIN
- or password. Enable find my device or find my iPhone so you can locate, lock, or erase it remotely. Hide message contents on the lock screen so
- verification codes aren't displayed to whoever happens to pick up your phone. A SIM PIN can protect the physical SIM if it's removed or the phone restarts. It
- doesn't stop somebody from convincing your carrier to transfer your number to a different SIM. for that. Secure the mobile carrier account with a strong
- account PIN and enable a number lock or port out lock when the carrier offers ones. If a criminal steals your number through a SIM swap, every security code
- sent by text goes to them instead of you. Your phone isn't just another device. In many cases, it's the key ring for everything else. Number nine, stop
- calling it a backup when it's always plugged in. Maybe you copy your files to an external drive. Good for you. You're already ahead of most people. But if
- that drive stays connected to the computer all the time, ransomware may encrypt the backup right alongside the original files. I've watched people
- proudly point to their backup drive while the same attack destroyed both copies. Keep more than one copy of anything important and keep at least one
- copy disconnected or somewhere else entirely like an unplugged external drive, another physical location, or a reputable cloud backup service that
- preserves versions. Then test the backup. Restore a few files and make sure they actually open. Don't wait for a disaster to discover you've been
- faithfully backing up corruption, empty folders, or nothing at all. A backup you've never restored from isn't a backup. It's a wish. Number 10, stop
- having no plan for when something actually goes wrong. Eventually, something will happen. A password leaks, a card gets skimmed, malware gets
- through, an account gets taken over. The people who recover quickly aren't necessarily luckier. They know what to do first and they don't panic click
- their way into an even bigger disaster. Start from a device you know is clean. Secure your primary email account first. Change the password. Sign out of other
- sessions. Remove devices you don't recognize. And check the recovery email address and phone number. Then inspect the mailbox for forward settings and
- rules you didn't create. Attackers sometimes add rules that quietly hide password resets, bank notices, and security warnings. Changing the password
- isn't enough if the bastard's already added his own recovery address or arranged for every warning to disappear. Change passwords anywhere the
- compromised password was used. enable two-step verification and save fresh recovery codes. And while you're at it, contact your bank using a known
- legitimate number if money or card information may be involved. In the US, freeze your credit with all three credit bureaus if identity information's been
- exposed. A credit freeze is free and helps stop new accounts from being opened in your name. You don't need to know everything. You need to know the
- first few correct moves before panic takes over. I want to give a quick genuine thank you to the channel members watching this one early. You're the
- reason I can keep doing this without smiling at sponsors I don't believe in. I really appreciate you. Sincerely notice what most of this didn't require.
- Expensive hardware, an IT department, or living in constant fear. It required unique passwords, a second step to log in, a router that's been touched
- sometime this decade, working backups, and enough suspicion to stop before clicking whatever some stranger shoved in front of you. Security is rarely one
- clever thing. It's 10 boring things you bothered to do before some criminal tested them. Do the boring work now or do the miserable cleanup later. If you
- want the entire process laid out as 7 days of step-by-step checklists, that's secure your digital life in 7 days. Links in the description along with a
- free security checklist to help you get started. Hit like, subscribe, and I'll see you in the next one. And remember, my friends, stay grumpy.
- Click the link that they pract another physical location or a reputable Oh yeah.
- [music]
Zum Nachlesen
PhishingUnter dem Begriff Phishing (Neologismus und Kompositum von „fishing“, engl. für „angeln“ und „phreaking“ für „hacken“) versteht man Täuschungsversuche, …
InformationssicherheitInformationssicherheit ist ein Zustand von technischen oder nicht-technischen Systemen zur Informationsverarbeitung und -speicherung, der die Schutzziele …