Ebay released a statement last week confirming that their online auction house had been hacked sometime during January – March 2014, compromising 145 million accounts. Their investigation revealed that employee login credentials were stolen by cyberattackers which were then used to access their corporate website.
While their official position is that there has been “no evidence of any unauthorized access to financial or credit card information, which is stored separately in encrypted formats”, the personal information of users including name, address, emails and passwords have been stolen. If you are a user of ebay, you would have received by now an email from them asking you to change your password.
The real concern here is not third parties unauthorised access to your ebay account. Instead, it’s third parties being armed with your personal information logging into other databases such as your emails or paypal account with a password that is the same as the one you used for ebay. It is a serious problem.
Users can change their emails and passwords of other accounts but cyber hacking is prevalent and such an incident will happen again.
Two step verification is an increasingly popular setup with regards to account access. It should be available with all your online bank account access. Please contact your bank if you don’t already have this setup. Further, you should set this up with your emails. I recently posted a blog on how to setup 2-step verification in Gmail. If you use Gmail then I highly recommend you set this up as well. http://www.onsitehelper.com/index.php/blog/99-2-step-authentication
If you are a user of PayPal, it is recommended that you set up the PayPal Security Key rather than simply changing your password. For further information see https://www.paypal.com/au/cgi-bin/webscr?cmd=xpt/Marketing_CommandDriven/securitycenter/PayPalSecurityKey
PayPal Security Key is a form of 2 step verification which along with your password, an additional method of verification is sent to you which is unique and changes every time you need to login. This can come as an additional password sent to you as an sms.
There are two options with PayPal:
Security Key card: This is an electronic device that creates a unique security code instantly at the press of a button. It is the size of a credit card. One time cost of $32.95 AUD.
Mobile phone Security Key: You can sign up to receive security codes by text message. – free.
I use the mobile phone Security Key which only took 30 seconds to setup. Here is how to do it.
1. Sign into PayPal
2. Click this link to register your mobile phone to receive sms https://www.paypal.com/au/cgi-bin/webscr?cmd=_register-security-key-mobile
Then follow the prompts.
Be proactive with your security and prevent your accounts from being hacked. The 2 step verification system is by far the best solution to date.
If you need any help in setting up or reviewing your IT security, please contact helpdesk@onsitehelper.com or call 03 9999 3106
Google Classroom
Deleting users in Google Apps
This video shows the process of removing ex employees from Google Apps.
It’s very important for a business to have an employee termination process to protect the businesses data as well as ensure there is an archive easily accessible if information needs retrieval.
Best business IT support services recommend the following steps for better managed IT services in your company.
1. Reset user password
This should be acted on straight away to prevent possible data loss or malicious behaviour from any disgruntled ex-employees. Once a user’s password is reset, it will lock them out of all Google Applications such as Email, Calendar, Drive, etc. This will take effect the next time they open their browser to access the systems.
2. Reset sign-in cookies
Any business It support will advise you to cover situations where the user may continue to have access to their data where their browsers are not closed. It is usually the case where the user has enabled passwords to be saved on the browser. Resetting cookies immediately kicks them out of any open session and requires them to log in again which they won’t be able to do as the password would have been changed.
3. Google takeout
Google Takeout archives their entire Google Apps profile into a zip file, which you can download to a computer/server or upload it back to a central storage in Google Drive.
This will come especially handy now that most of your employees are performing work from home services. Even in the near or far future when you will be recruiting people for work from home jobs, or employing freelancers, this will be really helpful to you.
As a business, you can have a Google workspace ID and can directly allot a sub ID within Google workspace itself to your employee, which will be under your control, the password being known to you. So when it would be time for you to let the person go, you can simply use Google Takeout from the same Google workspace account to archive the data and use it as required for your other workers or the next employee that you would recruit. If the process seems too complicated to you, you can hand out your tasks to managed IT services who will take care of everything.
4. Wipe the device remotely
If the ex-employee of yours is using a computing device with internet access to operate emails, documents, calendars and contacts related to your company, then you can remotely wipe the account from their phone/laptop or factory reset the phone to wipe everything. This will, again, be beneficial while dealing with a work from home employee when you don’t have physical access to the device the person is using and it hadn’t been possible for you to take out the data before him/her leaving.
5. Change owner for Google Drive items
When someone creates a document, slide, or a spreadsheet in Google apps, it adds him/her as the original owner of the document. All the requests regarding the particular file reaches only the owner and he/she is the one with full control over the sharing, editing, or even restricting access to the document. It is highly recommended by all business IT support services to change this name of the owner to the company owner himself/herself, once the document is fully ready to use. You, as the owner of the company, would want this control to be with you, especially in case the owner of the document would be leaving your organisation.
6. Delete or rename user
Rename the user and email address to a new account if someone is taking over that person’s role and needs their history of emails and other data. Otherwise delete the account if this is not necessary.
7. Email forwards
Another important guidance from most business IT support services is for you to create an email alias for some other user in the organisation to whom the emails sent to your ex-employee would be forwarded to.
If you require assistance with this, feel free to contact reputed and certified managed IT services provider, Onsite Helper, at helpdesk@onsitehelper.com or +613 99993106.
Server security – has your data been “heartbleed” out by hackers?
Share your inbox the safe way
Cloud-Based Services: Why Data Backup Is Important for Businesses in 2022
Move from Outlook to Gmail
Cloud based platforms and Australian privacy laws
Gmail Benefits Over Outlook
New additions to Google Docs & Sheets including add-on integrations.
Yesterday Google released a huge update to its Docs and Sheets applications by creating an integration to many third party cloud services such a MailChimp or one of my favourites LucidCharts (which I use for drawing network diagrams and flowcharts).
To access these new add-ons, simply create a new Google Docs or Sheets and at the top bar you will see a new option called Add-ons.
Click this menu and select Get add-ons. This opens up the Google marketplace where you can search and review the addons you want, most of which are free.
* Note. The add-ons are only available for the new Google Docs and Sheets. If you have existing Docs and Sheets which are not in the new format then you wont have access to this. I will create an article on how to convert old to new in the next few weeks.
A few of the more popular addons include:
Merge by MailChimp:
Merge makes it easy for organizations to create and send personalized email straight from a Google Doc. By pairing your Google Doc to a Google Sheet with users’ email addresses and data fields, you can merge in personalized content like first name, last name, address, etc., right from your Google Sheet. Then, when you’re ready, hit send. It’s that simple. Merge by MailChimp merges in the data from your sheet and sends the email content to the addresses in your Google Sheet.
LucidChart Diagrams:
Quickly create and insert flowchart, mind map, network IT schematics and more diagrams directly into a Google document. Work together in real time with your team and clients. Lucidchart is an HTML5-based visual collaboration tool that makes drawing diagrams fast and easy. Work together with an unlimited number of others to create and edit diagrams in real time, with changes merged and synced instantaneously
– great for team collaboration and working with clients. With the Lucidchart add-on for Google Docs, you can quickly:
– Create and edit Lucidchart documents from Docs
– Insert diagrams directly into a Google document
– Update inserted diagrams with latest changes made in Lucidchart
Letter Feed Workflows:
Need to gather approvals or feedback? Use Letter Feed to automatically send out emails and gather the approvals you need quickly. You’ll be notified immediately when it’s approved.
– Automatic: Choose your reviewers, and hit start—everything else is taken care of for you.
– Stay up to date: You can check the status of your approval at any time by simply visiting your original spreadsheet. You’ll know when each reviewer has received an email, opened the spreadsheet, and made a decision.
– Easy Publishing: One-click publishing allows you to easily publish a read-only version of your approved spreadsheet.
– Seamless: With Letter Feed Workflows, there’s no separate site to visit or separate login to remember. It works seamlessly with Google to automate your processes.
– Secure and Private: All document data is stored within your organization’s Google domain. Neither your document nor any sensitive data is ever sent outside of your domain.
To find out more about what Google Drive can do for your business, please contact Onsite Helper on 03 9999 3106 or email googleapps@onsitehelper.com