Posted on
Whatsapp

Whatsapp business may become a threat to hackers

By proson Leave a comment

One of the most criticized topics of Whatsapp is its security and privacy. As the most popular instant messaging platform in the world, it is not surprising that WhatsApp is often targeted by hackers. As for whether Fb should enhance its security, this is another topic.

But hackers often drill loopholes, this is the fact. Since Whatsapp launched the Whatsapp business relationship, the personal account can transfer data to the Whatsapp business account by entering a set of 6-digit confirmation numbers. Hackers see this and use the victim’s contact list to secretly transfer those names to Whatsapp business. Then what will play the role of a Whatsapp technician makes the victim’s guard down, saying that his information was sent to your account in error, so you are asked to give him the 6-digit confirmation code.

If you give it to him, he will successfully hijack your account, and you will never get in! If Whatsapp should do a good job, it should confirm the phone number in the SIM card instead of allowing users to add/change a phone number at will.

Posted on
健康

Homemade antibacterial fragrance

By proson Leave a comment

Essential oils can be bacteriostatic. Some media even reported the test of Evgeny V. Usachev at the Griffith University School of Engineering in Australia, proving that tea tree oil and eucalyptus oil are extremely effective in suppressing cold-causing coronavirus. Let me introduce you now:

The following essential oils have different degrees of bactericidal effect
Category 1: Laurel, clove, balsam
Category 2: Eucalyptus, tea tree, green flowers Melaleuca, Melaleuca, Rowan Shaye
Category 3: lemon, mandarin, orange, lime, eucalyptus camphor
Note: Class 1 essential oils have the strongest sterilization effect, and so on, but it should be noted that Class 1 and Class 2 essential oils are not suitable for pregnant women and babies.

In addition, the fragrance is made into a spray, so you can make a sterilizing spray, which is very simple. However, there are many types of coronaviruses. Whether the essential oil mentioned in the article is effective for the new coronavirus is unknown, and readers should judge for themselves.

Posted on
Data security

Live house data backup 再談

By proson Leave a comment

Live house 通常都會供樂隊或獨立音樂人去表演的，每次表演，也可能會被錄影，錄影後的片段放在呢？這個就是 live house 需要保護的資料了。談到資料保護，比較舊的方法就會會用上磁帶，每日，每週做 backup。不過隨著科技發展，現在也不一定用磁帶，反而會將一些資料轉移至雲端，利用例如，SFTP 這樣的命令做 backup rotation。

不過這樣備份計劃是否最好呢？做備份最怕就是所謂 single point failure，做遠程備份，不單只得一點，而是多點”failure“。最可能出現的錯誤，就是互聯網突然斷線，此外還有遠程機器『死機』，或硬碟問題不能做備份。不過就算做本機備份，也有『死機』，硬碟的問題，所以筆者認為除本機備份外，也要做遠程備份，這樣就萬無一失了！

Posted on
Data security

Data backup and technical problems of Live house

By proson Leave a comment

Live house is basically a venue rental service. For managers, its information is the list of customers and attendees (viewers). These data can basically be recorded with an RDBMS or Excel. But with more and more data, backup is necessary, so how to back up?

If it is an Excel file, it is easiest to do it with a USB flash drive, but if it belongs to the website data, it can be backed up into a server file and then backed up by tape. Of course, if there is more data, you may need to use progressive backup to back up the updated data part. This method has the advantage of saving some backup resources.

Security issues

Network security is an indispensable subject for the development of the Internet. With the development of cloud computing, data and data security is necessary, so companies should use a more secure database connection method, that is, the database allows only certain IPs to enter, and you must be careful Handle vulnerabilities in phpMyadmin and database user settings. I have tried to break into the server illegally because the database has too many test accounts and does not properly manage user permissions, so I advise you to really be careful.

Posted on Updated on
Uncategorized

Renovation and data restore

By proson Leave a comment

The annual Lunar New Year is here, and many companies will be renovating during the Lunar New Year to welcome new sights. But before the renovation, all the computers of the company’s colleagues must be backed up, because you don’t know what will happen during the renovation, especially if there are servers inside the company.

During the renovation period, the author suggested that two sets of backups must be made every morning, one in the system and one outside the system. The data in the system will be stored in the machine, and the backup data will be uploaded to the cloud outside the system. There is a benefit to saving to the cloud, that is, it will not be hit by the entity, because you do not know whether the decoration master will be lost due to accidental care, and it will not be the problem if it is transmitted to the cloud.

Posted on
新聞

家居防盜新方法：智能室內家居電話，好用嗎？

By proson Leave a comment

家居防盜一般都是安裝 IP cam，或者在淘寶、鴨寮街買回來的裝置就叫做好「家居防盜」了，不過現在或者一個更好方法 ——— 安裝室內智能電話。全球最大無線電話設計製造商 Vtech 偉而達推出一款室內無線電話，只要將開關感應器安裝在門窗、或有貴重物品的抽屜裏，當有人打開的話，系統便會自動發出警報，或者甚至可以致電到指定電話通知用家。

這個系統的確安裝方便，感應器不需任何設定，只需安裝電池便可以使用。除開關感應器外，電話也可以配置動作感應器，探測一些異常活動，如有可疑訪客在門外徘徊的話，便會發出警報。這款電話不需任何 IP network，應該是透過紅外線接受開關或動作訊息，並透過固網電話通知戶主。

這個系統雖然可以偵測一些可以活動，及適時地通知用戶，但始終用戶不能即時觀察家中可疑活動，如果戶主還在屋內或者還可以制止，但屋主不在家的話，根本不知是誰弄開門窗，或誰是疑人，就算想報警，也沒有辦法！所以這款電話可以算稱得上「得嗰樣」，希望生產商會將視像偵測功能加入，那麼戶主便可進一步情況了！所以筆者不建議購買這樣的系統，還等他們的更新吧！

Posted on Updated on
Data security

考勤系統的數據存放與保安問題

By proson Leave a comment

現在很多公司都有自己的考勤系統，有的用指模、有的用傳統打卡機、也有的使用最新的面部識別系統。不過無論用那款考勤系統，尤其後者，系統的數據存放與保安是一個很大的問題。就著這個課題，筆者嘗試在三方面探討如何處理。

網路保安

要成功紀錄員工的出勤紀錄，系統必須有個相應的軟件紀錄，而該軟件紀錄了員工的個人資料包括姓名、近照、員工卡號碼、生物紀錄等。而這些資料會紀錄在自家或雲端的服務器裏。服務器必須與門禁感應器連線，並通過互聯網給予限制人士使用。

一講使用互聯網便會有網路保安問題。外在的網路保安可透過連接服務器的路由器作 IP 地址及網路端口過濾嚴格控制入站的流量。

系統保安

有網路保安亦有系統保安，在系統保安上必須安裝防毒軟件確保系統不受病毒影響，而且要定期更新系統軟件補丁，確保系統的安全。除此之外，系統也必須限制職員登入，只准許授權職員登入，確保系統安全。

數據保安

要確保數據安全除了限制職員使用該系統外，還需要定期作備份，備份可以將資料以加密形式儲存到別的電腦或硬體內，確保就算該系統遭人為或天災破壞，也會有備份。至於為何以加密方式，就是防止第三方盜取，加密了的資料是需要私匙才能解密的。

遵守了以上原則，整個考勤系統就會非常安全了！

Posted on
Data security

GDPR and CCTV

By proson Leave a comment

GDPR is an acronym for General data protection regulation, which any organization operates in any European countries or target customers in the area, must comply with this new data security rules or you may be fined up to €20 million or 4% of your turnover (whichever is greater).

The Use of CCTV & GDPR

CCTV is used very commonly among all businesses, but under the GDPR, business owners need to have a ‘strong’ and ‘fair’ reasons explaining why they need to use CCTV in the areas. One particular example will be to protect employees health and safety. When CCTVs are installed, the business owners, must have signs and contact information which warns the people around CCTVs are in placed or they contact you if they have any enquiries.

Most CCTVs footages can be kept in 30 days, but if business owners want to keep in longer period, they must have a risk assessment and explain why.

The CCTVs footages must be encrypted and the business owners must have a contract in place with their
data processors and explain what they can do and can’t do.