Newsletter: Multi-State Info Sharing & Analysis Center

Monthly Security Tips NEWSLETTER
February 2013				Volume 8, Issue 2
How Do I Protect the Information on My Smartphone?
From the Desk of William F. Pelgrin, Chair
We’ve come to depend on our smartphones so heavily it is hard to remember what we did before we had them. If you have a smartphone, you now carry a fully functional computer in your pocket or purse. That’s a tremendous amount of information at your fingertips! Therefore, it is paramount that you safeguard the smartphone. Common Risks for Smartphones Take a moment to consider each of these areas: Loss of device and information theft. Smartphones are small and can easily be lost or stolen. Unauthorized users may access your accounts, address lists, photos, and more to scam, harm or embarrass you or your friends; they may leverage stored passwords to access your bank and credit card accounts, steal your money or make credit card charges; gain access to sensitive material, and more. Social Engineering. A common mobile threat is social engineering. Whether via text message, image, or application to download, an incoming communication may be an attempt to gain access to your information.  A current example consists of a text message that comes from an unknown number, telling you that if you click on the link provided, you’ll have access to thousands of free ringtones.  If this sounds too good to be true, that’s because it is.  The link is in fact a malicious link.  Clicking on it will compromise the security of your smartphone. TMI (Too Much Information). Guidelines for protecting privacy, safety, and reputation when sharing via computers also apply when sharing via smartphones. Mobile devices enable instantaneous capturing, posting, and distribution of images, videos, and information. They may also broadcast location information. Public Wi-Fi. Smartphones are susceptible to malware and hacking when leveraging unsecured public networks. Bluetooth and Near Field Communications (NFC). Bluetooth is a wireless network technology that uses short-wave radio transmissions to transmit voice and data. NFC allows for smartphones to communicate with each other by simply touching another smartphone, or being in proximity to another smartphone with NFC capabilities or a NFC device.  Risks with using NFC and Bluetooth include eavesdropping, through which the cyber criminal can intercept data transmission, such as credit card numbers.  NFC also has the risk of transferring viruses or other malware from one NFC-enabled device to another. Simple Steps to Protect Your Smartphone: Update the operating system. Smartphones are computing devices that need to be updated. Updates often provide you with enhanced functionality and enriched features, as well as fixes to critical security vulnerabilities. Your smartphone manufacturer should notify you whenever an update is available. Use of security software is a must.  As the smartphone market is increasing, so too is the amount of malware designed to attack smartphones. The software security solutions that are available for desktops and laptops are not as widely available for smartphones. A key protection is to use mobile security software and keep it up-to-date. Many of these programs can also locate a missing or stolen phone, will back up your data, and even remotely wipe all data from the phone if it is reported stolen. Password-protect your device. Enable strong password protection on your device and include a timeout requiring authentication after a period of inactivity. Secure the smartphone with a unique password – not the default one it came with. Do not share your password with others. Think before you click, download, forward, or open. Before responding, registering, downloading or providing information, get the facts. No matter how tempting the text, image, or application is, if the download isn’t from a legitimate app store or the site of a trusted company, don’t engage with the message. Understand the terms of use. Some applications claim extensive rights to accessing and leveraging your personal information.  If the app requires more access to your account and/or device than is needed to run the service, do not continue. In addition, be aware that terms can change over time.  Review your terms of use often. Be cautious with public Wi-Fi. Many smartphone users use free Wi-Fi hotspots to access data (and keep their phone plan costs down). There are numerous threats associated with Wi-Fi hotspots. To be safe, avoid logging into accounts, especially financial accounts, when using public wireless networks. Disable Bluetooth and Near Field Communication (NFC) capabilities when not in use. Capabilities such as Bluetooth and NFC can provide ease and convenience in using your smartphone. They can also provide an easy way for a nearby, unauthorized user to gain access to your data.  Turn these features off when they are not required. Enable encryption.  Enabling encryption on your smartphone is one of the best ways to safeguard information stored on the device, thwarting unauthorized access. Securely dispose of your device.  With the constant changes and upgrades in the smartphone market, many are upgrading their devices on a regular basis.  It is important that you wipe the information from your smartphone before disposal.  Additionally, make sure any SD cards are removed and erased. If you are not redeploying the SIM card to another device, then make sure your personal information stored on the SIM card is erased or destroyed. For More Information: For additional information about securing mobile devices, please utilize the following resources:    <!--[if !supportLists]-->·       <!--[endif]-->About.com 14 Ways to Find a Stolen or Lost iPhone: http://ipod.about.com/od/iphonetroubleshooting/tp/14-Ways-To-Find-A-Lost-Or-Stolen-Iphone.htm <!--[if !supportLists]-->·       <!--[endif]-->FTC – How to Dispose Your Mobile Device Securely: http://www.consumer.ftc.gov/articles/0200-disposing-your-mobile-device <!--[if !supportLists]-->·       <!--[endif]-->University of Northern Colorado:  http://www.unco.edu/cybersecurity/students/mobile.html <!--[if !supportLists]-->·       <!--[endif]-->US-CERT – Cyber Threats to Mobile Phones: http://www.us-cert.gov/reading_room/cyber_threats_to_mobile_phones.pdf <!--[if !supportLists]-->·       <!--[endif]-->Sophos – Android Tool:  http://www.sophos.com/androidsecurity <!--[if !supportLists]-->·       <!--[endif]-->Microsoft – Secure Your Smartphone: http://www.microsoft.com/security/online-privacy/mobile-phone-safety.aspx

National Service Agency: 205 organizations receive Senior Corps grants through competitive process

For Immediate Release   Friday, February 22, 2013 Samantha Jo Warfield  sjwarfield@cns.gov; 202-606-6775

National Service Agency Grants to Support 80,000 Senior Volunteers  205 organizations receive Senior Corps grants through competitive process WASHINGTON, DC – The Corporation for National and Community Service (CNCS) today announced more than $14 million in funding to support organizations and nonprofits across the country. The organizations will leverage the experience and talents of RSVP Senior Corps volunteers in schools, conservation projects, disaster response, veterans’ services, and other priorities. Nearly 80,000 new senior volunteers will have the opportunity to serve through 205 organizations receiving awards in 35 states. These funds were awarded as part of the first grant competition since 1971 for RSVP, one of three Senior Corps programs administered by CNCS.  Grantees selected will address a wide range of community issues, from disaster response and early childhood education to veterans and military families and environmental stewardship. A complete list of grants is available here. “Today, more than ever, communities need the talents and skills of all citizens to help solve our most pressing challenges,” said Wendy Spencer, CEO of CNCS. “Americans age 55 and over are a powerful resource to help communities achieve real change. These new RSVP grants will provide the bridge to connect seniors to meaningful service opportunities, so that they may deliver the enormous social and economic benefits we know are good for our nation.” Established in 1971, RSVP engages Americans age 55 and older in volunteer opportunities across the country, allowing citizens to be a part of the solution to community challenges. RSVP volunteers provide support to veterans and their families, help seniors to live independently in their homes, mentor at-risk youth, and provide critical support to communities recovering from disasters. While serving, RSVP volunteers also improve their own lives, by staying active and civically engaged. In 2012, 320,000 RSVP volunteers delivered more than 47 million hours of service in their communities.  Through community and faith-based organizations, RSVP volunteers served more than 563,000 veterans, mentored more than 82,500 children, and provided independent living services to more than nearly 742,000 elderly adults.  “Older Americans bring a lifetime of skills and experience as parents, workers, and citizens that can be tapped to meet challenges in our communities,” said Dr. Erwin Tan, Director of Senior Corps at CNCS. “Given the many social needs facing our communities – and the growing interest in service by 55+ American citizens – this is a moment of unprecedented need and opportunity for our programs to take advantage of an extraordinary wave of human capital that has the potential to transform our nation.” As part of the agency’s focus on driving greater innovation and impact, organizations receiving 2013 RSVP grants will report their progress using the performance measures CNCS adopted as a result of the bipartisan 2009 Serve America Act.  CNCS has embraced competition and performance measurement for the RSVP as a way to achieve greater impact in communities and the nation and to encourage innovation through adoption of new ideas and services. The next Senior Corps funding opportunity will open sometime mid-year. Americans who seek to volunteer with a Senior Corps program can search for local opportunities in their area at seniorcorps.gov.