Sun Jan 14, 2018 3:13 am
I asked our head of development to summarize info about two widely reported bugs, along with what you should do.
He did a great job, keeping it in understandable english (no geek-speak ). I hardly had to edit.
So, with that intro, he-e-e-e-e-e-re's Clayton...
Top of technology news this last week have been two very important vulnerabilities nicknamed "Spectre" and "Meltdown." Most computing devices including desktops, laptops, smart phones and tablets are vulnerable to one of these flaws.
The flaws occur in the hardware of the devices - it's a fundamental bug in the Central Processing Unit (CPU) and has been present and undetected for years. Due to the low-level nature of these bugs, fixing them is difficult. All of the major computing vendors are working to provide patches for their customers.
Who is affected?
Everyone with a computer, smart phone or any device in between.
What's the impact?
The flaw could enable software to bypass any security already in place on your device to read and interact with information it should not be allowed to access.
What do I need to do?
The risk for any individual is relatively low if you are already taking the following precautions:
1. Keep your devices up to date with the latest patches from the vendor, take those windows and Mac Updates, and updates for your phone.
2. Be very careful what software you install and run on your computer - make sure the company is reputable.
3. Make sure your Browser is the very latest available. If in doubt download FireFox or Chrome
How worried should I be? What's the risk?
Since every device is vulnerable, in the grand scheme of things, as a solopreneur you're less likely to be a targeted for an attack than a large organization, as always. This vulnerability needs local access (i.e., access to your computer, tablet or smartphone). So if you follow the above guidelines to keep everything updated, you'll be in the best shape possible.
So, make sure everything is up to date at YOUR end - we're taking care of the rest. Speaking of which...
What is SiteSell doing to protect my business?
We're doing what we always do and what we're advising you to do. We've been reviewing all servers and installing up-to-date patches. We also scrutinize very carefully what software is installed on our servers and the computers that SiteSellers use for work.
As always, it's harder to take advantage of these two bugs since there's no way for users to directly access our servers. While these bugs are unusual since they're right in the chips (meaning that we'll have to watch for unusual exploits), we're confident that your business is safe.
Ken's Bottom Line:
Thanks very much, Clayton. Whoever names these things should stop watching James Bond movies. "Spectre?"
The quick wrapup? Protect your own computer while we take care of our end...
1) Update your computer's and mobile devices' OS with the patches issued by Apple, Google and other manufacturers of all devices.
2) Upgrade to the latest browser versions.
3) Some sleazeballs are likely trying to take advantage. So be DOUBLY more paranoid about viruses. Common tricks are to fake emails from BigCo's such as Amazon or from your own friends, creating a "situation" (ex., "problem with your account") when you'll click on the link without thinking.
So don't click on links in your email - my personal policy is that I don't click on an email link unless it's from a friend AND I'm expecting a link. When in doubt, contact a friend to verify it was sent or verify long headers to make sure an email really does originate from Amazon.
This applies to mobile apps and software, too. Only use trusted companies.
4) That's it. Clayton and the dev team (special mention of our sysadmins) have got you covered for everything at our end!
Hope that helps?
All the best,