Safety First

 

Safety First

 

We have all heard about the Dark Web, but not many people really understand its uses. Unfortunately, one of the many things it is often used for, is the illegal trade of stolen information – yours and mine!

Let me digress for a moment…

Back in history, travel was one of the most dangerous pastimes to pursue, because of the threat of highwaymen. These unsavory characters would disguise and secrete themselves at strategic points along lesser-used routes and would cause any unfortunate traveler (or coach) that may be passing by, to stop – usually at gunpoint. These distasteful individuals would rob any unfortunate traveler of their possessions and disappear off into the darkness.

Now back to present day…

We all buy things online. Some people even use online retailers to do their regular grocery shopping because it is all so convenient. Unfortunately, without even stepping out of our front door, we are under the threat of modern day “highwaymen”, who are poised and ready to rob us of our “valuables” – our user credentials.

There is a process whereby these user credentials can be skimmed off from a retail site without the company even knowing about it.

Once your credentials have been skimmed, they are packaged up along with thousands of others, and offered for sale on the Dark Web. No bad guys ever need to meet to hand over the “goods”. No cash is exchanged. Nowadays, it is all done digitally, using digital currency (bitcoin, for example), which is effectively untraceable. This is a multi-billion-dollar-a-year industry.

What can we do, as “Joe Public”, to protect ourselves? Well, a good place to start is with your username and password. There are a few simple things, regarding your password, that can be done to help mitigate potential damage:

  1. Don’t use straightforward “dictionary” words. If you can find your password in any dictionary, anywhere – don’t use it. “Dictionary” attacks – using computer programs to process through every known word, in every dictionary – is one of the basic methods the bad guys use to get into your accounts.
  2. Along with straightforward words, don’t use immediate family names, birthdates, anniversary dates, or anything else immediately connected with *you*. Make these things random… or, if you must use names, make them at least a couple of steps removed from you: perhaps your grandma’s name instead of spouse, sibling, or child? Or maybe your best friend from kindergarten?
  3. Make your password complicated. Create a password that includes UPPERCASE and lowercase letters, intersperse those letters with numbers, and sprinkle in as many symbols (# $ % ^ & etc.) as the provider will permit. Personally, one of my passwords is 32 mixed characters long! Overkill, maybe. Secure, possibly. Will I forget it? Probably! LOL
  4. Don’t store your passwords digitally. A lot of people store their passwords on their computers, in unencrypted format – they don’t even try to hide the fact that what they have saved is a password! It is better to purchase a physical notebook in which you put all your passwords. You can then keep it in a safe, or some other very protected place until you need to access it. There are digital options, but my personal preference is an old fashioned notebook.
  5. Don’t use the same password for different accounts. Make up a different password for each of your accounts. Be imaginative – you can do it!

 

Albert Einstein is quoted in “ What Life Means to Einstein ” (1929) as saying, “Imagination is more important than knowledge. For knowledge is limited, whereas imagination embraces the entire world…”. (PDF courtesy of The Saturday Evening Post)

 

  1. Don’t give out your passwords. If you have no choice and need someone else to access your account, for whatever purpose, change it as soon as they log out.

We all have to stay vigilant. Maybe you should think about enrolling with a monitoring agency which will track your information (there are lots of options). These organizations scan the Dark Web looking for matches with your credentials – name, Social Security number, phone number(s), address(es), bank account number(s), credit card number(s), etc. They inform you if they find a match. At that time, you’d need to access the affected account and change your credentials.

It is unnerving but, just as the highwaymen of old with their tricorn hats and blunderbuss weapons are now lost to history, with due vigilance from us perhaps these modern-day highwaymen (and women) will also become a “thing of the past”.

===

Contact us TODAY to discuss how we can raise your Cyber Security awareness

===
Non-Technical Security Training:

  • CertNexus’ CyberSAFE
  • also NC-Expert exclusive training (contact us for details)

===
Professional Network Security:

===
If you would like to learn more about how NC-Expert can help,  contact us TODAY  !

The post Safety First appeared first on NC Expert.

NC-Expert Blog

Wi-Fi Myth Series - Myth #16: The Controller Knows Best

By Rie Morgan • October 7, 2026
A beautiful dashboard doesn't necessarily mean a beautiful network. There is something wonderfully reassuring about a wireless LAN controller dashboard: everything is neatly organized; access points are green; clients are connected; channel assignments look sensible; the controller reports that Radio Resource Management (RRM) is optimizing the environment; and the health score is sitting comfortably in the high nineties.... life is good. Uhmm... except that users are complaining about dropped calls, sluggish applications, and mysterious connectivity problems. But the dashboard says everything is fine! Welcome to Wi-Fi Myth #16: The Controller Knows Best. Modern wireless controllers are remarkably sophisticated. They collect enormous amounts of information, automate complex decisions, and provide visibility that engineers could only dream of a couple of decades ago. But there's an important distinction between collecting information and understanding what's actually happening in the RF environment... and that's where things get interesting.

Wi-Fi Myth Series - Myth #15: You Can Always Troubleshoot Wi-Fi Without a Packet Capture

By Rie Morgan • September 30, 2026
Modern Wi-Fi systems give us an impressive amount of information. Dashboards show signal strength, channel utilization, retry rates, client health scores, roaming events, application performance, access point statistics, and enough colorful graphs to make almost any troubleshooting session feel reassuringly scientific. And all of that information is useful. I’ll freely admit that most Wi-Fi problems can be investigated without immediately reaching for a packet analyzer. But “most” and “always” are very different words. There comes a point when a Wi-Fi engineer has to stop asking what the dashboard thinks happened, and start looking at what actually happened over the air. This is where packet captures enter the discussion. A packet capture is not required for every Wi-Fi problem. If an AP has lost power, you probably don’t need Wireshark to confirm your suspicions, but when the problem involves association, authentication, roaming, retries, retransmissions, connectivity, intermittent performance, or strange client behavior, packet analysis can turn speculation into evidence . Sometimes, you simply need to see the conversation, and what really happened, to resolve the issue.

Wi-Fi Myth Series - Myth #14: One Speed Test Tells You Everything

By Rie Morgan • September 16, 2026
We’ve all seen it happen: someone reports that the Wi-Fi is slow. A speed test is launched. The little needle races across the screen and, a few seconds later, an impressive number appears. “See? 600 Mbps. The Wi-Fi is fine.” Case closed. Except, of course, it isn’t. A speed test can be useful. It can tell you something about the performance experienced by a device at a particular location, at a particular moment, using a particular test server and network path. What it cannot do is provide a complete diagnosis of Wi-Fi health. That distinction matters because throughput is only one part of the user experience.