There's a bit of a to-do these days about large groups of unidentified drones being reported in New Jersey. Theories abound, from US government tests to foreign powers sending them in from offshore to swarms of domestic drones, some trying to follow others. An interesting aside (underreported) is the group of legal ramifications now being identified. Drone presence is outside a property owner's purview, occuring in FAA-controlled space. Also, it's a crime to damage or destroy any flying vehicle, even a $25 drone. So there seems to be little way to defend against a recalcitrant drone, perhaps even one bearing a grenade. The two thoughts that occur to me regarding defense (other than jamming) would be either to lase various sensors on the drone's frame, or to snare the vehicle with a net or grapple from another drone. Of course, all of the above might be considered illegal interference by the FAA.
As might be the case if one were to hack the control telemetry of the drone, taking over the device and landing it without destruction.
I'm no lawyer, but it looks like there's room for precedent here. Perhaps someone should jam a drone's control communications, hack and land the device and then wait for the owner to file suit. I doubt, after all, that these devices are designed to follow Asimov's Laws Of Robotics, which are as follows (see the story "Runaround" (1942) and later publications like the book "I, Robot"):
(1) A robot may not injure a human being or, through inaction, allow a human being to come to harm
(2) A robot must obey the orders given it by human beings except where such orders would conflict with the First Law
(3) A robot must protect its own existence as long as such protection does not conflict with the First or Second Law
(4 or zeroth) A robot may not harm humanity, or, by inaction, allow humanity to come to harm.
We live in interesting times.
Saturday, December 14, 2024
Sunday, October 6, 2024
Book Review: Philip Wilie
I attended a computing industry conference recently and got a free copy of Philip Wilie’s “The Pentester Blueprint”. In my opinion, “pentester” isn’t so much a job description as it is an Additional Duty As Assigned to somebody already working on a project or at an existing job. It’s nevertheless important, so I grabbed the gratis copy. The first four chapters were so basic I assumed that the target audience of the book was management, since only mention was made of tools used and very little procedure or strategy was discussed. A few points were important in legalistic senses, such as the absolute need for preparation if challenged during break-in attempts, virtual or real. One needs immediate contact information to customer authorities and admins, plus written permission to engage in penetration testing. But most of these first four chapters related to definitions and background issues. Chapter 4, Education Resources, was helpful in that it contained descriptions of organizations (like OWASP) with which I was familiar, but told of aspects of those groups I’d not known. Prior to chapter 5, though, I was losing hope regarding a new experience of any kind.
Chapter 5 provided quite a surprise. Its title, “Building A Pentesting Lab”, had me expecting a cooking recipe sort of approach, relying on hardware and software recommendation lists like many other books have done. But the chapter didn’t take that route, instead containing interviews with working admins and testers who described how and why they put together their specific systems (revealing as much as possible without violating confidences). Rationales were provided for what tools and hardware were included. And they varied considerably. If you’re doing web application security, you may need only a couple of laptops. But if you’re looking at industrial control systems, a whole virtualized network or three would be a good idea – and constructed with the specific type of PLC host (programmable logic controller) you’d be trying to research, defeat and then protect. This interview-based discussion method by Wilie is one I’ve not seen used in the computer books I’ve read, but I’ve seen it used by first-person accounts in 2600 Magazine. AND Wilie mentions that magazine in a resource section of his book, making this the first time I’ve ever seen that happen. If you know, you know.
I could go on, but this middle-of-the-book switcheroo by Wilie totally fooled me. I didn’t think he would deliver the goods for quite awhile, but I continued plodding along. It paid off. Consider “The Pentester Blueprint” if you see it, since it informs those of many other job descriptions than just the one of the title.
Chapter 5 provided quite a surprise. Its title, “Building A Pentesting Lab”, had me expecting a cooking recipe sort of approach, relying on hardware and software recommendation lists like many other books have done. But the chapter didn’t take that route, instead containing interviews with working admins and testers who described how and why they put together their specific systems (revealing as much as possible without violating confidences). Rationales were provided for what tools and hardware were included. And they varied considerably. If you’re doing web application security, you may need only a couple of laptops. But if you’re looking at industrial control systems, a whole virtualized network or three would be a good idea – and constructed with the specific type of PLC host (programmable logic controller) you’d be trying to research, defeat and then protect. This interview-based discussion method by Wilie is one I’ve not seen used in the computer books I’ve read, but I’ve seen it used by first-person accounts in 2600 Magazine. AND Wilie mentions that magazine in a resource section of his book, making this the first time I’ve ever seen that happen. If you know, you know.
I could go on, but this middle-of-the-book switcheroo by Wilie totally fooled me. I didn’t think he would deliver the goods for quite awhile, but I continued plodding along. It paid off. Consider “The Pentester Blueprint” if you see it, since it informs those of many other job descriptions than just the one of the title.
Monday, June 24, 2024
SO Obvious... but Sadly Needed To Mention Anyway
I must note at least one point about the recent prohibitions/restrictions upon certain software (at least in the US). Last Thursday the Biden Administration placed a ban upon sales of software from the Kaspersky company due to possible risks from the Russian government's access to telemetry or results from such software (like antivirus products). This recalls similar moves against Tik Tok, a social media platform with ties to China, indirect though they may be.
I'm not a lawyer but as I understand it, both situations mentioned above are questionable since the owner/operators of the programs/platforms have some connection to offshore entities (governments). This means that there exists a channel or channels possible to exfiltrate information from US users to potentially hostile or competitive interests which would not exist in many or most other products. That's the empirical point here - the channels exist.
There's also a legal point. If and when such channels are used to exfiltrate anything from domestic US users to any offshore location/entity, any number of violations of export restrictions could happen. And although the specifics of the exfiltering operation may not be mentioned by current legislation, the intent if not the letter of the law could easily be at risk here.
And there's an additional empirical point: if a channel exists via which domestic user information could be snatched, what's to prevent the curious third party (domestic or foreign) from discovering that channel? So here's the list of issues that impelled me to comment: first, we have potentially insecure communications situations present in certain software. Second, legal risks are created by the existence of said com situations. Third, the com situations create potential vulnerabilities that would be discoverable by any additional organization with the analytic capability to search for them.
I thought it was needed to overtly mention these points so as to contribute to the national-security-VS-free-speech debate (my own position being that free speech protections would not apply where national security concerns are objectively demonstrable).
I'm not a lawyer but as I understand it, both situations mentioned above are questionable since the owner/operators of the programs/platforms have some connection to offshore entities (governments). This means that there exists a channel or channels possible to exfiltrate information from US users to potentially hostile or competitive interests which would not exist in many or most other products. That's the empirical point here - the channels exist.
There's also a legal point. If and when such channels are used to exfiltrate anything from domestic US users to any offshore location/entity, any number of violations of export restrictions could happen. And although the specifics of the exfiltering operation may not be mentioned by current legislation, the intent if not the letter of the law could easily be at risk here.
And there's an additional empirical point: if a channel exists via which domestic user information could be snatched, what's to prevent the curious third party (domestic or foreign) from discovering that channel? So here's the list of issues that impelled me to comment: first, we have potentially insecure communications situations present in certain software. Second, legal risks are created by the existence of said com situations. Third, the com situations create potential vulnerabilities that would be discoverable by any additional organization with the analytic capability to search for them.
I thought it was needed to overtly mention these points so as to contribute to the national-security-VS-free-speech debate (my own position being that free speech protections would not apply where national security concerns are objectively demonstrable).
Friday, May 17, 2024
Somebody GETS it!!!
[edit - This is an experiment in desperation. I normally wouldn't engage in comment involving political content since it's so often divisive and irrelevant but in this case there might be an argument for it. As I mention below, we've been in the digital age for quite some time and 9 out of 10 of us are still cavalier about data management. This article is a way to call attention to such issues that I'd hadn't tried yet...]
Hunter Biden (son of current US President) is facing various legal charges and some of the prosecution's information is based upon files found on various computers Hunter seems to have left lying around. There was one apparently abandoned at a repair shop, one left in a rental car during or after a business trip and at least one or two other laptops mentioned in the news over the past year or two. I have no specific information on or comment upon these cases but I'd like to note here that the predicament raises an interesting question - interesting to me, that is. Namely, how would one play Hunter's hand? What if you were in the same situation? Is the situation even defensible?
I'm not a lawyer, but Hunter Biden is - he's got a JD although I'm not sure if he's practiced. I don't know if he came up with his strategy himself or if he's getting very good advice but there's certainly a great angle for defense here: Biden has never denied posession of the laptops. Is that a problem? Not as such, because defense can repeatedly raise the possibility of someone planting files upon his machines for political or other nefarious purposes. As many of us constantly shout, these systems in the hands of the average user are as secure as Andy Griffith's jail, in which Otis the town drunk would let himself out at the end of his daily sentence. Yes, they MIGHT be operated securely, but it takes work - and there are those very interested in breaking into high value targets.
Not only are average systems not very secure, but the hardware (easily trackable to a user) has not been the object of denial. Biden's team is right not to claim lack of ownership because first, it's easier to indict files or configurations (possible to remotely manipulate) and second, it's hard to deny ownership. Think of all the ways your computer could be connected to you:
- SKU number or bar code of device associated with credit card purchase
- processor serial number (if any)
- device serial number
- MAC address of NIC
- motherboard serial number (if present)
- any serials of peripherals or internal options
- hard drive serial numbers
- memory serial, stock or control numbers
- ISP logs (if unaltered and reliably seen to be so)
- browser, OS and application logs (if unaltered and reliably seen to be so)
- and so on. The Biden stance of having no challenge to ownership dodges every above problem that could help the prosecution if defense claimed that the laptops were planted. And another thing that's brilliant about it is that it avoids the common frame of mind that 'nobody can see what I do on my phone'. Personal computers have been around for about a generation and I've had a cell phone for about 20 years now. This stuff is NOT NEW. But the average Joe Sixpack still has no concept of electronic security... and is even IN IGNORANCE dismissive of whomever brings it up. Either Hunter or somebody with him Actually Gets It.
P.S. - and to the idiots who thought I was about to make some political statement, here's one: I predict that whoever you like is gonna lose.
P.P.S. - Here's another way to illustrate the moral of the story: you could be next. Outside the highly public circumstances of Biden's family, the loss of a cell phone, a laptop or even a PC lost in a burglary presents essentially anyone to the dangers of the loss of control of one's data. If the "new owner" gets curious about anything important beyond wiping for resale then now YOU ARE HUNTER BIDEN.
Hunter Biden (son of current US President) is facing various legal charges and some of the prosecution's information is based upon files found on various computers Hunter seems to have left lying around. There was one apparently abandoned at a repair shop, one left in a rental car during or after a business trip and at least one or two other laptops mentioned in the news over the past year or two. I have no specific information on or comment upon these cases but I'd like to note here that the predicament raises an interesting question - interesting to me, that is. Namely, how would one play Hunter's hand? What if you were in the same situation? Is the situation even defensible?
I'm not a lawyer, but Hunter Biden is - he's got a JD although I'm not sure if he's practiced. I don't know if he came up with his strategy himself or if he's getting very good advice but there's certainly a great angle for defense here: Biden has never denied posession of the laptops. Is that a problem? Not as such, because defense can repeatedly raise the possibility of someone planting files upon his machines for political or other nefarious purposes. As many of us constantly shout, these systems in the hands of the average user are as secure as Andy Griffith's jail, in which Otis the town drunk would let himself out at the end of his daily sentence. Yes, they MIGHT be operated securely, but it takes work - and there are those very interested in breaking into high value targets.
Not only are average systems not very secure, but the hardware (easily trackable to a user) has not been the object of denial. Biden's team is right not to claim lack of ownership because first, it's easier to indict files or configurations (possible to remotely manipulate) and second, it's hard to deny ownership. Think of all the ways your computer could be connected to you:
- SKU number or bar code of device associated with credit card purchase
- processor serial number (if any)
- device serial number
- MAC address of NIC
- motherboard serial number (if present)
- any serials of peripherals or internal options
- hard drive serial numbers
- memory serial, stock or control numbers
- ISP logs (if unaltered and reliably seen to be so)
- browser, OS and application logs (if unaltered and reliably seen to be so)
- and so on. The Biden stance of having no challenge to ownership dodges every above problem that could help the prosecution if defense claimed that the laptops were planted. And another thing that's brilliant about it is that it avoids the common frame of mind that 'nobody can see what I do on my phone'. Personal computers have been around for about a generation and I've had a cell phone for about 20 years now. This stuff is NOT NEW. But the average Joe Sixpack still has no concept of electronic security... and is even IN IGNORANCE dismissive of whomever brings it up. Either Hunter or somebody with him Actually Gets It.
P.S. - and to the idiots who thought I was about to make some political statement, here's one: I predict that whoever you like is gonna lose.
P.P.S. - Here's another way to illustrate the moral of the story: you could be next. Outside the highly public circumstances of Biden's family, the loss of a cell phone, a laptop or even a PC lost in a burglary presents essentially anyone to the dangers of the loss of control of one's data. If the "new owner" gets curious about anything important beyond wiping for resale then now YOU ARE HUNTER BIDEN.
Sunday, May 5, 2024
Physical Security
Right now my geographical area is experiencing heavy rain and wind and we've lost electrical power (I'm typing on a laptop with a good battery; I could also do this on the smart phone). I'm reminded of the times that I gave security committee programs on various kinds of preparedness relevant to my organization. One such talk turned upon the speculation that 3/4 of the potential physical problems that could befall our location would result in one single sort of result: loss of electricity. Let's consider that possibility.
Rising flood waters, a lightning strike on a pole-mounted transformer, high winds knocking trees onto a power line, copper theft, traffic accidents taking out telephone poles, deliberate vandalism and other things could all result in power loss further down the road or somewhere on the grid. And even if your area wasn't affected, the fix for an affected area might route power away from you, causing a service interruption in order to help the stricken zone. Here's a list of issues and items that could be relevant to the attempt to counter the above potential problems.
Generator Issues: diesel, solar, wind, transformers to feed storage devices like batteries (ordinary rechargeable or deep cycle).
Battery Issues: flashlights, laptop batteries, uniterruptable power supplies, cell phone chargers, cell phone power packs, AC adaptors
Vehicle Issues: fuel storage, oil and tool storage, fuel topoff before inclement weather, tuneups, tire condition, spare tire condition, jumper cables or startup devices as required
Shock Protection Issues: spare fuses, surge protection/power conditioners, Faraday bags, isolation wrist wires, battery removal and storage to prevent corrosion at leads
First Aid Issues: ordinary kit contents (bandages, aintibiotic creams, tape, scissors), prescriptions, spare glasses or contact lenses, chewable aspirin, Immodium, antacid, sunglasses, sunscreen, insect repellent, area repellent (like Yard Gard), duct tape for splints, paper towels, muscular pain medication such as Voltarin or Aspercreme with lidocaine, baby wipes. Lysol spray disinfectant, trash or leaf bags.
Rising flood waters, a lightning strike on a pole-mounted transformer, high winds knocking trees onto a power line, copper theft, traffic accidents taking out telephone poles, deliberate vandalism and other things could all result in power loss further down the road or somewhere on the grid. And even if your area wasn't affected, the fix for an affected area might route power away from you, causing a service interruption in order to help the stricken zone. Here's a list of issues and items that could be relevant to the attempt to counter the above potential problems.
Generator Issues: diesel, solar, wind, transformers to feed storage devices like batteries (ordinary rechargeable or deep cycle).
Battery Issues: flashlights, laptop batteries, uniterruptable power supplies, cell phone chargers, cell phone power packs, AC adaptors
Vehicle Issues: fuel storage, oil and tool storage, fuel topoff before inclement weather, tuneups, tire condition, spare tire condition, jumper cables or startup devices as required
Shock Protection Issues: spare fuses, surge protection/power conditioners, Faraday bags, isolation wrist wires, battery removal and storage to prevent corrosion at leads
First Aid Issues: ordinary kit contents (bandages, aintibiotic creams, tape, scissors), prescriptions, spare glasses or contact lenses, chewable aspirin, Immodium, antacid, sunglasses, sunscreen, insect repellent, area repellent (like Yard Gard), duct tape for splints, paper towels, muscular pain medication such as Voltarin or Aspercreme with lidocaine, baby wipes. Lysol spray disinfectant, trash or leaf bags.
Sunday, March 3, 2024
Free Technical Certifications
Certifications aren't the be-all and end-all of the training landscape, but if it's free, the price is right. Maybe. Here's a roster of those free certs that appear valuable to me, depending on your area of interest.
CISCO SYTEMS, INC
The site skillsforall.com is one area where Cisco lists most of their no-charge classes, courses and certifications. Overall Cisco may have close to 500 online classes or courses, but this is a convenient page for programs that don't require a third party proctor (like CCNA, etc.).
JUNIPER
At juniper.net (then "training", then "free training"), one sees not free certs but free training modules for eventually taking the test for paid certs. However, if one finishes a free module with a score of seventy percent or greater, one is awarded a 75% discount on taking the actual test. At current price schedules that's only $50, so almost free. Perhaps charging just a bit holds down the crowds and prevents slow website performance, such as the next organization typically faces...
ORACLE
At academy.oracle.com one can establish not a "member" account (unless you're an institution) but a "student" or student hub account for free. Depending upon the product family there may be dozens or more free courses of instruction. Beware of attempts to get access to a test or even the site on nights or weekends. Early in the morning would be best, since "free" is so popular.
OPSWAT
This is a provider of cybersecurity protection products that claims as clients 5 of the 10 largest US banks and 98% of all commercial and research nuclear power plants in the US. They have three levels of certification. There are the free one or two certs, then a $50 level, then a $1000 level. The two lower levels are best practices exercises of general applicability. The high priced level is for their specific products which are within the MetaDefender suite.
GOOGLE
Classes or instruction videos on these many certs can be seen on YouTube but rather than search there, it might be more profitable to use a list at reliablesoft.net. Search on "Best Google Certification Courses in 2024 (Free and Paid)". Although there's an emphasis on digital marketing (obviously for this company), many courses are available for general use of Google products and for general cyber security relevance.
AMAZON WEB SERVICES
A search (from anywhere) on the article "Make the most of AWS Training and Certification free offerings" should lead you to an Amazon page with links for many hundreds of tests and courses. Within the Amazon site also try searching for "AWS Training and Certification". AI, cloud, security and data analytics are well represented.
AZURE
Other than trying the Microsoft site or YouTube or a low-cost provider like Udemy, one can get search hits on pages like Class Central, listing over 1000 courses for capabilities and tools of this AWS competitor. And don't forget related issues such as Windows Server courses if you're on that side of the business. Try pasting this link: https://www.classcentral.com/subject/microsoft-azure?free=true
CISCO SYTEMS, INC
The site skillsforall.com is one area where Cisco lists most of their no-charge classes, courses and certifications. Overall Cisco may have close to 500 online classes or courses, but this is a convenient page for programs that don't require a third party proctor (like CCNA, etc.).
JUNIPER
At juniper.net (then "training", then "free training"), one sees not free certs but free training modules for eventually taking the test for paid certs. However, if one finishes a free module with a score of seventy percent or greater, one is awarded a 75% discount on taking the actual test. At current price schedules that's only $50, so almost free. Perhaps charging just a bit holds down the crowds and prevents slow website performance, such as the next organization typically faces...
ORACLE
At academy.oracle.com one can establish not a "member" account (unless you're an institution) but a "student" or student hub account for free. Depending upon the product family there may be dozens or more free courses of instruction. Beware of attempts to get access to a test or even the site on nights or weekends. Early in the morning would be best, since "free" is so popular.
OPSWAT
This is a provider of cybersecurity protection products that claims as clients 5 of the 10 largest US banks and 98% of all commercial and research nuclear power plants in the US. They have three levels of certification. There are the free one or two certs, then a $50 level, then a $1000 level. The two lower levels are best practices exercises of general applicability. The high priced level is for their specific products which are within the MetaDefender suite.
Classes or instruction videos on these many certs can be seen on YouTube but rather than search there, it might be more profitable to use a list at reliablesoft.net. Search on "Best Google Certification Courses in 2024 (Free and Paid)". Although there's an emphasis on digital marketing (obviously for this company), many courses are available for general use of Google products and for general cyber security relevance.
AMAZON WEB SERVICES
A search (from anywhere) on the article "Make the most of AWS Training and Certification free offerings" should lead you to an Amazon page with links for many hundreds of tests and courses. Within the Amazon site also try searching for "AWS Training and Certification". AI, cloud, security and data analytics are well represented.
AZURE
Other than trying the Microsoft site or YouTube or a low-cost provider like Udemy, one can get search hits on pages like Class Central, listing over 1000 courses for capabilities and tools of this AWS competitor. And don't forget related issues such as Windows Server courses if you're on that side of the business. Try pasting this link: https://www.classcentral.com/subject/microsoft-azure?free=true
Monday, February 26, 2024
Still Good To Consider
I've been concerned with tech issues for some years now and with all the new developments, I'm again surprised at what hasn't changed and what problems are STILL with us after so long. I just pulled a Sun workstation out of the storage building to see if the clock battery cradle has rusted away, but over on the desk is this month's cell phone. Which I trust about as far as I can throw it. And in all the time between those two devices, I sometimes think that almost nothing has improved.
As a little test, I'll rip off my post of about August of 2022. I listed eleven things I'd listed before, and will no doubt list again. Do these sound familiar?
1. The network might not be secure.
Network maintenance and patching is a round-the-clock job and the safety level of your electronic environment may fluctuate between maintenance periods.
2. It might not be good to have only one copy of that file.
Any backup idea is better than no backup idea.
3. It might not be good to get sued.
Certain kinds of phone or computer use can create copyright problems, police issues, work misinterpretations or even more spam than other channels. Limiting use or having multiple phones or laptops for different purposes (personal VS work) could mitigate risk.
4. It will not be good to lose your laptop or phone.
Do you depend on apps to do things you haven't documented or set up in some other way? How would you get by with no phone, or during a period of switching devices?
5. Things break.
Beer spilled in keyboard? Phone dropped down porta-potty? SD card had a really acidic soft drink spilled on it? Device run over by car? Memory nonfunctional due to cracking? Backup or duplicate plans are in order.
6. Settings break.
Reinstalling a browser or app can cause "forgetting" of settings needed for the thing to work. Even writing settings down on paper is better than nothing.
7. Don't forget how good desktops and laptops can be at certain things.
The most insecure thing about a phone is that it gets to the 'net through a phone company that sells your information and may not make security a priority. The "older" ways may have more tools you know or tools that work better.
8. Earphones or headphones can be distracting and even dangerous.
You need to pay attention to traffic, possible muggers and even other pedestrians when on the sidewalk.
9. Touch or proximity radiation from cell phones can be an issue.
Guys: the regular pocket? Girls: phones in the cleavage? Repeated storage of a phone in skin contact or close might cause radar-like burns over long periods of time. Consider a holster or some sort of shielding.
10. It's not good to improperly dispose of cell phones or other data-carrying objects.
I've been finding old user files on replacement or refurbished drives for almost 20 years. They were supposedly wiped clean. Nope.
11. It might be good to turn things off sometimes.
The OFF switch! There it is. In an always-on, always-connected world, disconnection or power-down situations (where practical) can head off many problems, and possibly stretch battery life.
As a little test, I'll rip off my post of about August of 2022. I listed eleven things I'd listed before, and will no doubt list again. Do these sound familiar?
1. The network might not be secure.
Network maintenance and patching is a round-the-clock job and the safety level of your electronic environment may fluctuate between maintenance periods.
2. It might not be good to have only one copy of that file.
Any backup idea is better than no backup idea.
3. It might not be good to get sued.
Certain kinds of phone or computer use can create copyright problems, police issues, work misinterpretations or even more spam than other channels. Limiting use or having multiple phones or laptops for different purposes (personal VS work) could mitigate risk.
4. It will not be good to lose your laptop or phone.
Do you depend on apps to do things you haven't documented or set up in some other way? How would you get by with no phone, or during a period of switching devices?
5. Things break.
Beer spilled in keyboard? Phone dropped down porta-potty? SD card had a really acidic soft drink spilled on it? Device run over by car? Memory nonfunctional due to cracking? Backup or duplicate plans are in order.
6. Settings break.
Reinstalling a browser or app can cause "forgetting" of settings needed for the thing to work. Even writing settings down on paper is better than nothing.
7. Don't forget how good desktops and laptops can be at certain things.
The most insecure thing about a phone is that it gets to the 'net through a phone company that sells your information and may not make security a priority. The "older" ways may have more tools you know or tools that work better.
8. Earphones or headphones can be distracting and even dangerous.
You need to pay attention to traffic, possible muggers and even other pedestrians when on the sidewalk.
9. Touch or proximity radiation from cell phones can be an issue.
Guys: the regular pocket? Girls: phones in the cleavage? Repeated storage of a phone in skin contact or close might cause radar-like burns over long periods of time. Consider a holster or some sort of shielding.
10. It's not good to improperly dispose of cell phones or other data-carrying objects.
I've been finding old user files on replacement or refurbished drives for almost 20 years. They were supposedly wiped clean. Nope.
11. It might be good to turn things off sometimes.
The OFF switch! There it is. In an always-on, always-connected world, disconnection or power-down situations (where practical) can head off many problems, and possibly stretch battery life.
Subscribe to:
Posts (Atom)