Skip to main content

Posts

How to Ask for Technical Help Correctly

I was going to post this over in reddit's /r/cybersecurity_help, but I decided it sounds too much like a lecture.  ----- We understand that when you have "pressing" concerns, you often can't even formulate a question coherently, but please take a few moments to organize what information you have, and what questions do you have, so we can answer your questions immediately, rather than trying to draw additional details out of you which wastes both your time and ours.  Rule 0: Please read the posting guide: https://www.reddit.com//r/cybersecurity_help/wiki/guide  Rule 0.5: Please read the "10 rules" (check right hand bar at following link). Failure to follow them may result in removal of your question.  https://sh.reddit.com/r/cybersecurity_help/ I'm going call this the 2 C's of Cybersecurity Questions: Condition, Confirmation. (There are 2 more on the answer side, Cause, and Correction, but we'll talk about those later) **Condition: WHAT made you c...
Recent posts

Why did all of my Steam Shortcuts turned into Print Dialog?

Recently after a bit of registry cleaning, my desktop stopped launching games from Steam. I tried to troubleshoot this, and ended up spending HOURS chasing something that seems rather popular but nobody seem to have a proper solution. The symptoms are simple: all of the shortcuts on the desktop turned into the blank "white page" icons. When you right click it, it doesn't say what app to open it with. Its type is "Internet Shortcut (url).  Deleting it and recreating it from within Steam (gear icon // Create Desktop Shortcut) doesn't help. It seems the .URL handler is completely f-ed up. I tried reinstalling Steam, and Steam actually did delete all the old files and reinstalled its own files. No change.   So I go look for a registry fix... Except...  .url is NO LONGER A SUPPORTED file type in Windows 11. It's kept in as a backward compatibility setting only. So you have to search Win10 fixes.  So I found this fix via WinhelpOnline . Download the reg zip, unzip,...

I put in *#21# in my smartphone's dialer, and it says everything is forwarded?! Should I be alarmed?

Short answer: No.  Long answer: GSM phones let you put in these dialer codes to change some settings. The codes, collectively, are known as USSD (unstructured supplementary service data) codes, sometimes called "quick codes". These settings are NOT in your phone, but on your mobile carrier's computer as a part of your account.  Generally speaking, USSD codes are used to add or remove service, or change some settings for the service. Some carriers use it for payment notification and payment status. Actual active codes are dependent on the carrier. As this is often used to just show the status of something it's also called interrogation codes, or feature access codes.  So what does *#21# actually do (note: it's actually asterisk - hash - two - one - hash)? It shows the status of call forwarding set to the five types of calls you get: voice, SMS, fax, data, and system. (NOTE: some phone vendors only show voice, SMS and data, not fax or system) And in all cases, it ...

The Phantom Hacker Scam -- Everything you need to know

When the FBI warns people about the scam , this is serious, but this is actually just a variation of the scam that perpetrated upon the Asian community for a while.  To make a long story short...  Stage 0  Beware when you are contacted via some method, text message, pop-up on your computer, a direct phone call, supposedly from a company that you had patronized before (a national brand, like Amazon, Best Buy, Uber, and so on). Those companies usually do NOT contact you directly, but these imposters will. Anyway, the message claims you need to call them right away to mitigate any damage.  Stage 1 When you call, the imposter will ask you to download some program so they can control your computer from afar, in order to show you some supposed "evidence" that either have been hacked or will soon be hacked, ask about your bank, and claim your bank's fraud department will be contacting you shortly. This is of course, another imposter.  Stage 2 "Your bank's fraud departm...

What have I learned from giving advice at Subreddit /r/cybersecurity_help?

 After I got my cybersecurity certificates and certifications, I decided to hang out in subreddit /r/cybersecurity_help for a while, as that's where people go for help. I've noticed the questions tend to come in 3 major categories: a) I noticed something odd. Could I have been hacked?  b) I REALLY have been hacked, what do I do now?  c) I did something stupid! Could I have been hacked?  I have found that some people are just super-nervous when it comes to technology, as if they can be hacked everywhere doing nothing, while others are almost completely oblivious to the risks.  Let's discuss each in turn.  a) I noticed something odd. Could I have been hacked? OP started noticing some oddities with his or her phone, and wonders if it's connected to some previous event.  EX1: Op got a call from the doctor's office. X minutes later a call with caller ID "Health Center" arrived. Op asked for more details, and was hung up on. Op wants to know if the spammer h...

I Got Both Google Cybersecurity and and ISC2 Certified in Cybersecurity. Should You?

The Google Cybersecurity Certificate and the ISC2 Certified in Cybersecurity are two of the most popular cybersecurity certifications available. Both certifications cover a wide range of topics, including network security, application security, and security operations. However, there are some key differences between the two certifications. Both Google Cybersecurity Certificate and the ISC2 Certified in Cybersecurity are considered entry-level certifications The Google Cybersecurity Certificate is very friendly for people who did not come from a computer background, but if you already know IT, Linux, SQL, or Python, you will have an advantage here. You will also learn some practical cybersecurity tools, such as SIEM and Splunk log reading, and you will end up trying to write incident report logs, short analysis reports, and so on.   The ISC2 Certified in Cybersecurity is more focused on theoretical and base level knowledge, with a bit more discussion on the differences among in...

I finished "Certified in Cybersecurity" by ISC2 in (ahem!) 2.5 days, and passed the exam. What did I learn?

I decided to look into another introductory cybersecurity certification after finishing the Google Cybersecurity Professional Certificate back in June in 5 days. Took me a while due to other obligations, but I finally decided on "Certified in Cybersecurity" by ISC2, and I started last Thursday.  I finished all coursework by Saturday, and I was waiting for the peer-graded assignments to be graded. That was when I realized this is only half the battle (yes, I am quite bad at research sometimes). This is a prep course for the actual ISC2 CC certification exam, and that cost $199.  So I went on Google to look for a discount code, as there often are for these.  That is when I found that ISC2 is doing a "One Million CC" initiative... It will give away 1 million CC prep course and exams absolutely free to people around the world. It's even available in languages such a Spanish, German, Chinese, and Japanese, in addition to English! That's right... the self-paced C...