Nothing Is Private on Open Wi-Fi

In a coffee shop, at the airport, or a library, people connect to public Wi-Fi without thinking much about it. Though using an unencrypted connection to check a baseball score or a flight status might be not too risky, reading e-mail or performing any Web activity that requires a login is like connecting your laptop to a stadium Jumbotron that broadcasts everything you’re doing. Wi-Fi hotspots in public places are convenient, but they’re usually not secure. When using a hotspot, it’s best to send information only to websites that are fully encrypted.

You can be confident a hotspot is secure only if it asks you to provide a WPA password. If you’re not sure, treat the network as if it were unsecured.

How Encryption Works

Encryption is the key to keeping your personal information secure online. Encryption scrambles the information you send over the internet into a code so that it’s not accessible to others. When using wireless networks, it’s best to send personal information only if it’s encrypted – either by an encrypted website or a secure Wi-Fi network. An encrypted website protects only the information you send to and from that site. A secure wireless network encrypts all the information you send using that network.

How to Tell If a Website is Encrypted

If you send email, share digital photos and videos, use social networks, or bank online, you’re sending personal information over the internet. The information you share over the internet is stored on a server. Many websites, such as banking sites, use encryption to protect your information as it travels from your computer to their server.

To determine if a website is encrypted, look for https at the beginning of the web address (the “s” is for secure). Some websites use encryption only on the sign-in page, but if any part of your session isn’t encrypted, your entire account could be vulnerable. Look for https on every page you visit, not just when you sign in.

Don’t Assume a Wi-Fi Hotspot is Secure

Most Wi-Fi hotspots don’t encrypt the information you send over the internet and are not secure.

If you use an unsecured network to log in to an unencrypted site – or a site that uses encryption only on the sign-in page – other users on the network can see what you see and what you send. They could hijack your session and log in as you. New hacking tools – available for free online – make this easy, even for users with limited technical know-how. Your personal information, private documents, contacts, family photos, and even your login credentials could be up for grabs.

An imposter could use your account to impersonate you and scam people you care about. In addition, a hacker could test your username and password to try to gain access to other websites – including sites that store your financial information.

Protect Yourself When Using Public Wi-Fi

So what can you do to protect your information? Here are a few tips:

• When using a Wi-Fi hotspot, only log in or send personal information to websites that you know are fully encrypted. To be secure, your entire visit to each site should be encrypted – from the time you log in to the site until you log out. If you think you’re logged in to an encrypted site but find yourself on an unencrypted page, log out right away.
• Don’t stay permanently signed in to accounts. When you’ve finished using an account, log out.
• Do not use the same password on different websites. It could give someone who gains access to one of your accounts access to many of your accounts.
• Many web browsers alert users who try to visit fraudulent websites or download malicious programs. Pay attention to these warnings, and keep your browser and security software up-to-date.
• If you regularly access online accounts through Wi-Fi hotspots, use a virtual private network (VPN). VPNs encrypt traffic between your computer and the internet, even on unsecured networks. You can obtain a personal VPN account from a VPN service provider. In addition, some organizations create VPNs to provide secure, remote access for their employees.
• Some Wi-Fi networks use encryption: WEP and WPA are the most common. WPA2 is the strongest. WPA encryption protects your information against common hacking programs. WEP may not. If you aren’t certain that you are on a WPA network, use the same precautions as on an unsecured network.
• Installing browser add-ons or plug-ins can help, too. For example, Force-TLS and HTTPS-Everywhere are free Firefox add-ons that force the browser to use encryption on popular websites that usually aren’t encrypted. They don’t protect you on all websites – look for https in the URL to know a site is secure.

See more helpful articles on cyber security and safety at On Guard Online, the federal government’s website offering very useful information about your online safety and security.

Learn How to Fight the Right Way

Many people wonder if couples counseling is right for them and their situation. When a marriage or partnership goes off course, whether suddenly or over time, deciding to see a counselor might be the smartest thing you can do to find renewed peace and love. When a partnership has been derailed, couples often hope that things will get better on their own. They continue on the same course, feeling the same anger, resentment or hopelessness.

A couple might feel their relationship is beyond a solution and believe ending the relationship is the only viable option. Counseling will help both parties explore whether each is invested in continuing the relationship, and develop strategies for moving forward. Therapy can teach couples conflict resolution skills and strategies to communicate better, teach the skills necessary to make arguing more productive, with the result of reduced anger and hostility.  Couples can be taught the rules of “fair fighting.”

Marriage counseling can help families deal with stressors such as budgeting problems, parenting differences, or the division of labor around the house.  It can also help families who are dealing with grief or loss issues. Dealing with an affair is an issue that can be addressed in counseling, bringing the couple to a clear understanding of the impact the affair has had on the relationship.

For partners who want to save their marriage, seeking counseling is a constructive starting point. In therapy, partners will be able to address both sides of an issue on a level playing field. Couples have the best prognosis when both partners are invested in treatment.  Both people must be willing to look at themselves and the things that they each can change to help improve the relationship, and not just point the finger at the other.  When a couple agrees to treatment, it can be the first step toward a happier and healthier marriage.

Maybe he used the Facebook search tool to seek out single girls or guys age 15-21 who live in towns near his and who are looking for “Networking.” Maybe your photo caught his attention.

If you have your privacy settings saved to “Everyone,” everyone can see your profile information and know as much about your as your close friends and family do.

From your hometown, your stalker might be able to find the address of your school. If you added your work address on your open profile, he would know that too.

He can learn the names of your close friends, can see the pictures you put up and the names you tag.

He can join one of your groups, if he wants to learn more about you. Somebody in the group invites members to a party using the Facebook events tool. You get an invite and accept it. He gets an invite too.

But even if he doesn’t accept, he knows where to find you. Even if he hadn’t been invited, he could have looked up the location when he saw on your profile that you had accepted an invitation. All he has to do is click on the link to the event that Facebook automatically placed in your mini-feed. He now knows where you will be that night.

Without ever leaving his home, a stranger has found you, can look at your pictures, can learn about your life.

He gets assertive and sends you a friend request. You’ve seen his name in one of your groups and on an invite list to the party you plan to attend, so you figure he must be safe. In the friendly spirit of social networking sites, you add him as a friend. Now he has your cell phone number too.

Maybe this guy is harmless, but do you want to take a chance?

How do you protect yourself from falling victim to a predator?

Make your profile private so that only friends can see it. Predators will always choose a readily available target over one that takes work to access. People from your past who look for you will still find your name in a search, but they won’t see your profile until you add them as a friend.

Make your profile limited by using the privacy settings. Use it for people from your past or people you don’t know well.

Don’t list your birth date. At the least, omit the year. Don’t list your school name or the name of where you work. Consider not listing your hometown,  political views or religious affiliations.

Don’t put your phone number on your profile. People you really know you will have other ways to get it.

Keep your personal statement limited. The more you reveal of your likes and dislikes, the more information a stranger will have to create a fantasy obsession or to seek out ways to connect with you in real life.

Never accept an invite to a party or event on Facebook. Decline all online invitations. If you really plan to attend, tell the host in person that you will be there.

Don’t tag your pictures. Strangers won’t know the names and faces of your friends. Never label specifics about where a picture was taken, such as the name of a club or restaurant. Instead label pictures with non-identifying titles like “Birthday Party ‘11“, “Vacation” or “Randoms.”

Restrict your picture settings so that only friends can see the pictures you post or pictures that you are tagged in. Do this using the privacy settings.

Be selective in the applications that you add. Stay away from overly personal applications or applications that give away information you have purposely left out of your profile, like hobbies, social groups or favorite things.

Be sure to take precautions when you shop online.

As more and more people turn to the convenience of online shopping for the holidays, make sure you use your common sense. Cyber criminals are usually one step ahead with ways to steal your money and personal information.

Be a savvy online shopper. Here are some tips you can use to avoid becoming a victim of cyber fraud:

· Do not respond to unsolicited (spam) e-mail.

· Make sure sensitive information is encrypted. Before you supply any sensitive information, look for a URL that begins with “https” instead of “http”. This indicates a layer of security. Also look for a padlock or shield icon, which indicates recognized encryption software.

· Use a credit card. Always use a credit card to pay for transactions, rather than a debit card, money order or other forms of “cash.” Credit card companies will provide a certain amount of protection against fraud, eliminating or at least limiting personal liability.

· Use different passwords for different vendors. Don’t use the same password for all your online shopping accounts. If a password is intercepted or stolen from one account, it makes all your other online transactions vulnerable as well.

· Avoid using open networks. Only shop on secure networks and avoid free “open” Wi-Fi networks, where data or shopping habits may be visible to third parties.

· Keep software up-to-date. Make sure your browser and operating software is up-to-date. Attackers are constantly looking for vulnerabilities in operating systems and manufacturers regularly offer updates to eliminate potential weaknesses.

· Do not click on links contained within an unsolicited e-mail.

· Be cautious of e-mail claiming to contain pictures in attached files, as the files may contain viruses. Only open attachments from known senders. Scan the attachments for viruses if possible.

· Avoid filling out forms contained in e-mail messages that ask for personal information.

· Watch out for seasonal scams. Be cautious with e-mails claiming to be shipping confirmations or package alerts, particularly if they contain a file attachment. Delete any message from a source that you don’t recognize.

· Always track transactions and shipments through the retailer’s or shipper’s web site. Always compare the link in the e-mail with the link to which you are directed. Determine if they match and will lead you to a legitimate site.

· Log directly onto the official website for the business identified in the e-mail, instead of “linking” to it from an unsolicited e-mail. If the e-mail appears to be from your bank, credit card issuer, or other company you deal with frequently, your statements or official correspondence from the business will provide the proper contact information.

· Contact the actual business that supposedly sent the e-mail to verify if the e-mail is genuine.

· If you are asked to act quickly, or there is an emergency, it may be a scam. Fraudsters create a sense of urgency to get you to act quickly.

· Verify any requests for personal information from any business or financial institution by contacting them using the main contact information.

· Remember if it looks too good to be true, it probably is.

Fraudsters direct victims, via e-mail, to a spoofed website. A spoofed website is a fake site that misleads the victim into providing personal information, which is routed to the scammer’s computer. Beware of e-mails or text messages that indicate a problem or question regarding your financial or bank accounts. Internet criminals will attempt to direct victims to click a link or call a number to update an account or correct a purported problem. The links may appear to lead you to legitimate websites, but they won’t. Any personal information you share on them could be compromised.

If you are expecting a delivery, the major legitimate delivery service providers, such as UPS or FedEx, do not e-mail customers directly regarding scheduled deliveries. You must have an existing account for this type of communication. Nor will they state when a package has been intercepted or is being temporarily held. E-mails about these issues are phishing scams that can lead to personal information breaches and financial losses. Do not respond to requests for personal information.

Be wary of buying products through classified ads on auction websites. Internet criminals post classified ads, often on auction sites, for products they do not have. They make the scam work by using stolen credit cards. Fraudsters receive your order, and then charge your credit card for the amount of the order. But they use a separate, stolen credit card for the actual purchase. They pocket the purchase price obtained from your credit card, and have the merchant ship the item directly to you. Consequently, an item purchased from an online auction but received directly from the merchant is a strong indication of fraud. Victims of such a scam not only lose the money paid to the fraudster, but may be liable for receiving stolen goods.

When purchasing from an auction site, carefully check the seller’s rating and feedback, along with their number of sales and the dates on which feedback was posted. Be wary of a seller with 100 percent positive feedback, with a low total number of feedback postings, or with all feedback posted around the same date and time.

Fraudsters will also offer reduced or free shipping to auction site customers. As for product delivery, fraudsters posing as legitimate delivery services offer reduced or free shipping to customers through auction sites. They operate their scam by providing fake shipping labels to the victim. The fraudsters do not pay for delivery of the packages. The delivery service providers, therefore, intercept the packages for nonpayment. The victim loses the money paid for the purchase of the product.

It’s safest to purchase gift cards directly from merchants rather than through auction sites or classified ads. If the merchant discovers the card you received from another source was initially fraudulently obtained, the card will be deactivated.

If you have received a suspicious e-mail, file a complaint with the Internet Crime Complaint Center: www.ic3.gov.

For more information on e-scams, visit the FBI’s E-Scams and Warnings webpage: www.fbi.gov/scams-safety/e-scams.

Are you stressed out?

As a private investigator, I have to deal with the unpredictable daily. My job is highly stressful and too often dangerous. When doing surveillance I must be hyper-vigilant and alert, not knowing what is coming next in volatile, possibly violent situations. I have had to experiment and learn ways to help me process the constant, prolonged stress I experience. In addition to physical exercise, proper diet, one product that helps me immensely to maintain calmness is Trauma-gen, a homeopathic remedy by Seroyal/Genestra.

Trauma-gen

Trauma-gen acts as a nervous system relaxant and sedative. It can be used in any situation that results in emotional, psychological, surgical or physical shocks to the system. Trauma-Gen can also be used as an anti-inflammatory agent.

Stress leaves its marks on all of us. Daily life is full of hassles, deadlines, frustrations and demands. Chronic stress has become commonplace, ever present. In small doses, it can help you perform under pressure and do your best. But when you’re continually in emergency mode, your mind and body pay the price.

If you feel frazzled and overwhelmed most of the time, it’s really important to bring your nervous system back into balance. Recognize the signs and symptoms of stress and take steps to reduce its harmful effects. Long-term exposure to stress can lead to serious health problems. Chronic stress disrupts nearly every system in your body. It can raise blood pressure, suppress the immune system, increase the risk of heart attack and stroke, contribute to infertility, and speed up the aging process. Long-term stress can even rewire the brain, thus leaving you more vulnerable to anxiety and depression.

The body can’t distinguish between physical and psychological threats. For example, when you’re stressed over a busy schedule, an argument with a friend, a traffic jam, or unpaid bills, your body reacts the same as if you were facing a life or death situation. If you are faced with demanding responsibilities, your body’s emergency stress response may be “on” most of the time. The more your body’s stress system is activated, the easier it is to turn on, the harder it is to shut off.

Become aware of the stressors in your life. Experiment and find what helps you: whether meditation, exercise, reading, socializing, etc. And consider including Trauma-gen as part of your stress-reduction regimen.

You can buy Trauma-gen here.

Trauma-gen 15ml

Each 10 Drops (0.5ml) Contain:

Black Alder (Alnus glutinosa) Bud Extract (1:20)     8.3 mg

Black Currant (Ribes nigrum) Bud Extract (1:20)     8.3 mg

Hawthorn (Crataegus laevigata) Bud Extract (1:20)     8.3 mg

Adult: Take five drops twice a day, or as recommended by your health care practitioner.

Contraindications: Refer to product label for details.

Available as: 15ml bottle

Suitable for vegetarians and vegans.

Invert bottle and shake lightly allowing for drops to fall directly under the tongue or into 1/4 oz of water. To promote drop flow, invert bottle and shake before each use.

If your wallet is stolen, within a very short amount of time, the thieves could cause a whole lot of damage in your name that could take you years and many thousand dollars to fix. For example, they could order an expensive monthly cell phone package, apply for credit cards, get a credit line approved, get a PIN number from the Department of Motor Vehicles to change your driving record information online.

Be proactive. Make it as difficult as possible for the identify thieves looking to take your money.

1. Do not sign the back of your credit cards. Instead, put ‘PHOTO ID REQUIRED.’

2. If you write checks to pay on your credit card accounts, do not put the complete account number on the ‘For’ line. Instead, put only the last four numbers. The credit card company knows the rest of the number. Don’t give access to your account to anyone who is handling your check as it passes through all the check processing channels.

3. Put your work phone number on your checks instead of your home phone. If you have a PO Box use that instead of your home address. If you do not have a PO Box, use your work address. Never have your Social Security number printed on your checks. You can add it if it is necessary.

4. Photocopy the contents of your wallet. Copy both sides of each license, credit card, etc. This will let you know what you had in your wallet and all of the account numbers and phone numbers to call and cancel. Keep the photocopy in a safe place. We have been told we should cancel our credit cards immediately. What you need in order to do that is to have close at hand the toll free numbers and your card numbers. You don’t want to waste hours fumbling around looking for this vital information.

Also remember to carry a photocopy of your passport when you travel either here or abroad. If you passport is stolen, your life will be a lot easier if you have a photocopy of it.

5.  File a police report immediately in the jurisdiction where your credit cards were stolen. This proves to credit providers you were diligent. This is a first step toward an investigation, if that becomes necessary.

Most Important

6. Immediately call the three national credit reporting agencies to place a fraud alert on your name and freeze your credit. Also call the Social Security fraud line number. This is crucial to limit the damage.

What does this alert do for you? It lets any company or bank checking your credit know that your information was stolen. They then have to contact you by phone to authorize new credit or loans. The thieves will not be able to get additional credit or loans in your name.

Here are the numbers you always need if your wallet is stolen: 1. Equifax:  1-800-525-6285
2. Experian (formerly TRW):  1-888-397-3742
3. Trans Union:  1-800-680 7289
4. Social Security Administration (fraud line):  1-800-269-0271

Use Digital Forensics to Prove Your Case

Shelia knew something was amiss when her husband would close his computer windows when she entered the room. It was just one more thing in a list of behaviors that she found suspicious. Shelia was sure there was evidence on the computer that would either prove her husband’s innocence or guilt, but she just didn’t know how to move forward

Eric started to see an increase in text messages on his mobile phone bill. His wife seemed evasive when he asked about them. Eric suspected that his wife was having an affair, but didn’t know how to proceed.

Act Quickly to Hire an Expert

Ask Questions

The Internet is an endless repository of information. Embarrassing, compromising information can often be remarkably persistent on hard drives, even after being deleted. Keep in mind, however, that electronic information, whether on computers, mobile phones or GPS devices and thumb drives can degrade over time. A computer forensics expert can help by using specialized techniques for the collection, preservation and analysis of electronic data with a view to presenting evidence in a court of law. Your best recourse is to hire a computer forensics expert sooner rather than later. Be prepared with the right questions:

1. Is your forensic service licensed? In some states there may be a licensing requirement. Texas, for one, now requires forensics analysts to be licensed private investigators.
2. Do you use forensically sound tools and methods that will hold up in court? Computer forensic services must use write blockers, mobile phone collection hardware and also software accepted by the industry to be accepted in court.
3. Do you have the capability to collect evidence on site? There is usually only a short window of time to gather evidence from a device such as a phone or computer. The ability to go to the device rather than have it delivered to an office location is an important requirement.
4. How will you handle and store the evidence you gather? Expert forensic service providers understand the importance of the evidence “chain of custody”. If they cannot explain how they will safeguard that vital chain of custody to insure the evidence admissible, look for another service.
5. What will you deliver to me? At a minimum a forensic examination should include:

• Proper Chain of Custody
• Imaging and Verification of Original Media
• Detailed Examination
• Documentation of Findings
• Preparation of Examination Report
• Provide Report of Analysis and Findings to client

Target the Evidence You Need

Collecting electronic forensic evidence can be expensive and time consuming. Work with your attorney and private investigator to determine which kind of evidence will best advance your case and work within your budget. Forensic service providers call this process “triage”. Here are some sources of evidence you may want to consider:

1. Computers – An obvious choice, but if the subject of investigation has a “reasonable expectation of privacy” with respect to the information on the computer, it may not be legal to gather the evidence. Your attorney or private investigator can answer this question. Note also there are social techniques for gaining access to the computer. It may be as simple as asking.
2. Mobile Phones – Much useful information can be gathered from mobile phones these days. Chat sessions, recent calls and even GPS locations can be collected depending on your specific situation. Collecting and analyzing the mobile phone image can be expensive, but yield helpful information.
3. GPS devices – Often overlooked, GPS devices can have recent trips, favorite locations and other information stored on them.
4. USB Storage devices – Don’t overlook these small devices. Files can be recovered long after they are deleted. Information can be collected to show how and when the device was used.
5. Digital Cameras – Digital pictures often hold revealing information such as time, date and even on some models GPS location!
6. Other items – Depending on the sophistication of the subject being investigated, evidence can be hidden on Digital Video Recorders (DVRs such as Tivo), voice recorders, game consoles.

Be Smart about How You Collect Information

Small things can make the difference in evidence collection. In investigating infidelity, you play an instrumental role in selecting and collecting the information you need to support your case. To be successful, you must be smart about how this is done. Here are some tips to follow:

1. Do not confront your spouse. Confrontation or similar provocative actions can be cues to your spouse that he or she needs to erase accounts, files or other digital information that points to his or her guilt. Resist the urge to confront. Work closely with your attorney and private investigator according to a plan that will get you results.
2. Request access, but don’t push. Even brief access to your spouse’s computer can overcome the reasonable expectation of privacy your spouse has with his or her computer. This access can then demonstrate you have the legal right in the future to have a forensic analyst collect the information on the computer on your behalf without his or her knowledge. So if you suspect your spouse’s computer holds evidence, speak to your spouse and request access, but don’t push too hard, as this could raise suspicion.
3. Have a computer forensic expert gather a complete image of the computer. This is more involved that just copying the hard drive and all files. A full image of the computer can potentially reveal what has been deleted, what search terms used and more. At your court date a judge will rule whether this evidence is admissible. If the judge rules in your favor, the complete computer image can then be entered into evidence. The computer hard drive image can then be analyzed. Consult with an attorney for the particulars regarding the law.
4. Select the best opportunity to collect data. Computers and other electronic equipment have very large data capacity. This increases your chance of recovering useful information, but it also potentially takes a much longer time to gather a full image of the computer. The best case would allow enough time to remove the main disk from the computer and transport it to the forensics lab for duplication. Once copied, it can then be returned. The second choice would be to collect the information on site, but this can take many hours to complete and be more expensive.
5. Provide your forensic analyst with key words that will help in the search for evidence. The more you know about the information you need, the easier it will be to find on the source. For instance, a name, email address or hotel name could be the difference between a long exhaustive search and finding evidence quickly. If you are working with a private investigator, he or she may be able to help you to develop key words to help narrow your search.

Consult an attorney if you have specific questions.

Note: Always use great care when dealing with electronic evidence. If it is gathered incorrectly, you may be breaking laws and/or it may not be usable in court.

What is elder abuse?

Elder abuse refers to any knowing, intentional, or negligent act by a caregiver or any other person that causes harm or a serious risk of harm to an older adult.

Who are the abusers of older people?

Family members are most often the perpetrators of elder abuse, most commonly a spouse, followed by adult children. Neglect is the most common form of abuse perpetrated by family members.

Who is at risk?

While elder abuse happens across the social spectrum. Social isolation and mental impairment (such as dementia or Alzheimer’s disease) are two factors that may make an older person more vulnerable to abuse. In some situations, studies show that living with someone else (a caregiver or a friend) may increase the chances for abuse to occur. A history of domestic violence may also make a senior more susceptible to abuse.

Types of Abuse

Physical Abuse

Inflicting, or threatening to inflict, physical pain or injury, or depriving a person of basic needs.

• Unexplained signs of injury such as bruises, welts, or scars, especially if they appear symmetrically on two side of the body
• Broken bones, sprains, or dislocations
• Report of drug overdose or apparent failure to take medication regularly (a prescription has more remaining than it should)
• Broken eyeglasses or frames
• Signs of being restrained, such as rope marks on wrists
• Caregiver’s refusal to allow you to see the elder alone

Emotional Abuse

Inflicting mental pain, anguish, or distress on an elder person through verbal and non-verbal acts.

• Threatening, belittling, or controlling caregiver behavior that you witness
• Behavior from the elder that mimics dementia, such as rocking, sucking, or mumbling to oneself

Sexual Abuse

Non-consensual sexual contact of any kind.

• Bruises around breasts or genitals
• Unexplained venereal disease or genital infections
• Unexplained vaginal or anal bleeding
• Torn, stained, or bloody underclothing

Neglect

Refusal, or failure by those responsible, to provide food, shelter, health care or protection for an elder adult.

• Unusual weight loss, malnutrition, dehydration
• Untreated physical problems, such as bed sores
• Unsanitary living conditions: dirt, bugs, soiled bedding and clothes
• Being left dirty or unbathed
• Unsuitable clothing or covering for the weather
• Unsafe living conditions (no heat or running water; faulty electrical wiring, other fire hazards)
• Desertion of the elder at a public place

Abandonment

The desertion of an elderly person by anyone who has assumed the responsibility for care or custody of that person.

Fraud and Exploitation

Illegal taking, misuse, or concealment of funds property, or assets of an elder person.  For more about fraud against the elderly,

Healthcare Fraud and Abuse

• Duplicate billings for the same medical service or device
• Evidence of overmedication or undermedication
• Evidence of inadequate care when bills are paid in full
• Problems with the care facility:
  - Poorly trained, poorly paid, or insufficient staff
  - Crowding
  - Inadequate responses to questions about care

What should you do if an elder is being abused?

Report it. Elder abuse is a crime. If you suspect elder abuse in any situation, whether it’s in a private home or a residential or medical facility, the most important thing you can do to help is report it. Many victims of elder abuse feel shame and fear, and may not be able to report elder abuse themselves.

Call the police or 9-1-1 immediately if someone you know is in immediate danger.

You also can call the Eldercare Locator at 1-800-677-1116. At this number you can find help and referrals to a local agency who can give you guidance.

If the danger is not immediate, but you suspect that abuse has occurred or is occurring, please tell someone. Relay your concerns to the local adult protective services, long-term care ombudsman, or police. For a list of reporting numbers go to this important link: Where to Report Abuse.

When You Call to Report Elder Abuse have this information ready:

1. Your name and contact information, but if you prefer to remain anonymous you can still report elder abuse
2. The elder’s name, address and contact information
3. What types of support the elder has (including family, doctor or other medical workers, friends, and health care workers who could be helpful)
4. Details about why you suspect elder abuse or are concerned about the possibility of elder abuse, including physical evidence (bruises, burns), hitting, yelling, poor nutrition or other threats to the elderly

Links and Resources

National Center on Elder Abuse The Eldercare Locator, public service of the Administration on Aging, U.S. Department of Health and Human Services, is a nationwide service that connects older Americans and their caregivers with information on senior services. The Eldercare Locator is designed to help older adults and their families and caregivers find their way through the maze of services for seniors by identifying trustworthy local support resources. The goal is to provide users with the information and resources they need that will help older persons live independently and safely in their homes and communities for as long as possible.

The Eldercare Locator, public service of the Administration on Aging, U.S. Department of Health and Human Services, is a nationwide service that connects older Americans and their caregivers with information on senior services.

Call the Eldercare Locator toll-free at 1-800-677-1116. Monday through Friday 9:00 AM to 8:00 PM (ET).

Frequently Asked Questions Answers to 12 key questions about elder abuse. See Basics and other site links at left on page for additional information.

National Domestic Violence Hotline for Anonymous & Confidential Help 24/7
The hotline provides support counseling for victims of domestic violence and provides links to 2,500 local support services for abused women. The hotline operates 24 hours a day, every day of the year. Call 1-800-799-7233 or (TTY) 1-800-787-3224

Password fatigue. We all have it. We need to remember too many passwords. The average Internet user today has 40 personal and professional accounts requiring user names and passwords, according to PriceWaterhouseCoopers. To make life easier for ourselves, we choose passwords that are easy to remember, like our pets’ names, for example. Over half of the consumers it interviewed used the same user name and password for all or most of the sites they visit, Jupiter Research found.

We know what we’re supposed to do. Make them cryptic, and change them regularly. But strong passwords­­—those that contain upper and lower case letters, numbers and punctuation—are a lot harder for us to remember than, say, our cat’s name. It isn’t surprising that we turn to Fluffy as our source of inspiration.

How do passwords get stolen? Robert Graham, CEO of Errata Security, explains that we can get hit with either online or offline attacks. In online attacks, hackers try to log on pretending to be you and guess your password. Unless you’ve chosen something extremely easy to guess, such as asdfg, this isn’t usually a problem, because online systems automatically lock your account after several attempts.

Offline password hacking, Graham says, is another story. When hackers break into a system to steal the encrypted password file or eavesdrop on an encrypted exchange across the Internet, they are then free to decrypt the passwords without anybody stopping them.

Graham’s facts are eye-openers. Hackers have programs that can guess passwords at the rate of 1 billion guesses a second. With passwords composed of letters, numbers, and symbols, a five-character password will have 10 billion combinations. This means hackers can guess a five-character password in only 10 seconds. But things quickly get more difficult for hackers:

5 characters = 10 seconds
6 characters = 1,000 seconds
7 characters = 1 day
8 characters = 115 days
9 characters = 31 years
10 characters = 3,000 years

It is obvious that we need long and complex passwords. While hackers can usually crack anything with seven characters or fewer, they are unlikely to decrypt passwords that are nine characters or longer. Passwords should also contain uppercase and lowercase, numbers, and symbols. According to Graham, that makes 100 possible combinations for each character. Lowercase passwords have only 26 combinations per character. A hacker can guess an all-lowercase password of 10 characters in about two days.

Hackers have another trick up their collective sleeve: the mutated dictionary attack. As Graham explains it, a large password like “Aardvark-Zebra9″ is a longer password than hackers would be able to discover by brute force. But Hackers get around this with a dictionary attack. It involves trying to match passwords with words in a dictionary, instead of trying all combinations of characters. Hackers then mutate the words that reflect the common alterations (mutations) people make to passwords.

When we try to make their passwords complex, we usually do something simple to them. Instead of choosing the just michael, we will make it michael! . Putting an exclamation mark at the end of a password is one of the most common mutations people choose. Hackers know this.

When devising your passwords, consider this list of common mutations that hackers will try to dictionary words:

• Capitalizing the first letter of a word
• Checking all combinations of upper/lowercase for words
• Inserting a number randomly in the word
• Putting numbers on the ends of words
• Putting numbers on the beginning of words
• Putting the same pattern at both ends, like *foobar*;
• Replacing letters like “o” and “l” with numbers like “0″ and “1″
• Punctuating the end of words
• Duplicating the first letter, or all letters in the word
• Combining two words together
• Putting punctuation or space between the words

Hackers don’t choose only words in English, but also in Spanish, French and German. They also choose words from pop culture, like xbox360 or Britney Spears.

Here’s an example Graham gives: If they know who you are, they will find words particular to you. Let’s say your name is John Smith, you drive a BMW, you work for Microsoft, and you like to watch The Office. A hacker will Google these terms and create wordlists from the resulting Web pages. Thus, Carell325i seems like a fine 10-character password to defeat hackers, but it will get cracked in only a few minutes by a hacker who knows you.

Devising strong, secure passwords doesn’t have to give you a migraine.

So how do you choose an effective password? Increase the complexity of elements hackers have to check. This will make it less likely they will guess your password. They will check for numbers on the ends of passwords, but as long as you’ve chosen something like your birthdate instead of 1234, it’s something likely to be missed.

Including just one international character, like a vowel with an umlaut, will defeat most password crackers. Typing long phrases instead of words will also help. In theory, it should be easy to guess “Twas as a dark and stormy night” as a pass phrase, but hackers won’t catch it.

On the other hand, the more complex you make your password, the harder it will be for you to type it. Try to create something that you can comfortably type.

For managing and remembering your passwords, consider a password manager. When you create a password, store it in a password manager to keep it safe and encrypted. To generate effective passwords, use a password generator. Dozens of good password management and generator tools are available.

Check out Google’s directory list of password management and password generator options.

Try random.org to generate a random password of bytes converted to hex or straight digits.

The Associative Word List Generator is a tool that generates a list of words relevant to some subjects, by scouring the Internet.

Roman Lab Software’s Any Password is a free, easy-to-use download that encrypts and stores all of your passwords and user names in a simple tree format.

KeePass is a free/open-source password manager helps you to manage your passwords in a secure way. You can put all your passwords in one database, which is locked with one master key or a key-disk

Test the strength of your passwords at Password Checker.

Source: Robert Graham

Seller, Do You Know What to Do?

Your vehicle and its title have one thing in common. They both require maintenance. When you buy or sell a used vehicle, but neglect to properly handle the necessary paperwork, you may find yourself liable, fined or penalized for the buyer’s mistakes while driving a vehicle whose title is still in your name.

An auto title is a legal certificate of ownership issued by the Department of Motor Vehicles (DMV). It lists the current owner’s name and address, the make, model and year of the vehicle, and the first date sold. Whenever a vehicle is sold, traded in or given away, the vehicle’s title must be reassigned to its new owner.

Texas state law requires a vehicle to be titled in the buyer’s name within 20 business days of its sale. However, not all sellers and buyers comply with this requirement, causing many thousands of vehicles to remain titled in the names of the sellers.

Without properly transferring the title, the seller could be held responsible for tickets, toll violations, accident liability of the buyer, or could even have property seized if the vehicle was used to commit a crime after the date of sale. A fresh auto title is prepared by the DMV and mailed to the new owner, listing the buyer as the current owner. Even if you are just giving the car to a family member, the process to transfer the car title in Texas is still the same.

What can you do to protect yourself? Knowing and following the rules for vehicle title transfers is the best protection.

How to Transfer the Title of the Vehicle You Are Selling

You must hand over the vehicle’s title to the buyer. Sign and date the title. Write in the buyer’s name, as well as the purchase price. You, as seller, should write down, also, the current odometer reading, unless the vehicle is 10 or more years old, rated by the manufacturer with a carrying capacity of two tons or more, or if it’s gross vehicle weight rating exceeds 16,000 pounds.

Give the buyer the vehicle’s latest registration receipt. If you cannot find it, you can get a copy from your county tax office. Locate your county tax office.

Complete the Application for Texas Certificate of Title, Form 130-U. The buyer needs this form to apply for a new title in his or her name. The seller will list the odometer reading, VIN and sales price. Both parties must sign Form 130-U and list their addresses. If you are giving the car to someone, put $0.00 for the sales price and select “Gift Tax $10.00.” The tax amount will be $10.00. Keep for your records the Vehicle Identification Number (VIN) from the title and the buyer’s contact information. If there is a lien on the car, you will enter on Form 130-U the first lien date and when the security agreement was signed by the financial institution or individual financing the vehicle. Also include the lienholder’s name and address.

It’s a good idea to accompany the buyer to the county tax office just to be sure your name is officially removed from the title. To complete the vehicle title transfer, both the buyer and seller should take the necessary documentation to the tax office. Locate your county tax office.

Remember to take to your local county tax office:

· completed Application for Texas Certificate of Title, form 130-U

· registration receipt

· title

· proof of insurance for buyer

Remove your license plates from the vehicle. You can transfer them to your next vehicle. Removing your plates will force the buyer to re-title the sold vehicle in his or her name, which protects you. Also, be sure to remove your windshield registration sticker.

If you can’t make it to the county tax office, or if you are not sure the buyer will follow through, you must submit a Vehicle Transfer Notification. The Vehicle Transfer Notification will help protect you as seller, and might save you the hassle of proving that you weren’t the vehicle’s owner when it was parked in a red zone. You, as seller, have only 30 days to remove liability. This lets TxDOT know you no longer own the vehicle, and removes you from being held liable for anything the new owner may do with the vehicle. This form must be submitted to your County Tax Office. See options for Vehicle Transfer Notification.

Try to get a receipt as proof that you transferred your title. A Bill of Sale signed by both you and the buyer should be sufficient. You, as seller, are not required to submit a Bill of Sale at the time of sale and transfer, but it is helpful in providing extra documentation.

Resources

Vehicle Title FAQs

Texas Department of Transportation Website

Download Texas Certificate of Title, Form 130-U

Texas County Tax Offices

Download Vehicle Transfer Notification

Vehicle Transfer Notification Options