Wednesday, April 9, 2014

What is the Heartbleed Bug and Should I be Worried?

If you have been listening to or reading the new today you likely will have heard about the Heartbleed bug that could compromise encrypted communications across the Internet.  It is a vulnerability in some web servers that could allow a hacker to "listen in" on (be able to read) an encrypted internet session.  Many internet session are encrypted especially those that involve financial transactions.

What is most interesting about this bug is that it has been a bug since late 2011 but was only publicly announced today, along with the update that fixes it.

Now here is the good news about this bug........

Our Data Security experts at KFCU have been busy this morning researching our potential exposure to this bug and we are happy to report that none of our systems are affected by this bug.  

We take our member's internet security and safety very seriously and will continue to be diligent in researching and remediating any and all threats to our member's financial transactions and identity. 

Say Good bye to an Old Friend – Windows XP

Microsoft has ended support (including security patches) for Windows XP operating systems.  As I sit at my computer on the eve of the day that Microsoft will effectively put to rest the beloved system, I reminisce over fond memories of what was probably the most stable, easy-to-use Windows Operating System.  I'm sure you may have questions about what this really means as it relates to things like ATMs and online banking, but first let’s pay a little homage where due; Windows XP was built in late 1990 and released in 2001.  It far outlived most people's expectations and has now been faithfully serving us for 13 years.  Microsoft has been warning us since 2007 that the time would come to lay it to rest; we just didn't want to believe it.  Since technology ages in dog years, Windows XP is an old dog for sure.

Let me answer some predictable questions.  If you have more, please contact us at 505-254-4369.

“I have heard that most ATMs in the US are running Windows XP.  Should I be afraid to use an ATM starting tomorrow?”

ATMs will continue to be safe to use.  ATM networks have always had additional security software and measures in place to protect them.  ATM networks including CU Anytime have always been safe and secure.
Of course, it’s always a good idea to practice safe banking practices when using an ATM.  Be wary of your surrounding when using one and follow up online to check all your account balances and transactions every day.  Let us know immediately if you see something suspicious.

“My Windows XP PC still runs just fine - why can’t I just keep on using it until it stops working?”

Once Microsoft stops fixing security bugs, Windows XP will soon become an unsafe operating system.  Continuing to use it on your PC will put you at significant risk for account takeover fraud.  Hackers will have an increasingly easier time of compromising your PC--putting your finances and identity at risk.
Although it’s hard to say “good by” to an old friend, now is the time to invest in a new PC with a modern operating system.

There are several great options --Windows 7, Windows 8 and Mac, to name the most popular.  These all provide the level of security that is currently needed.  Just a word of advice from personal experience: if you really like the functionality of Windows XP, Windows 7 is the most similar to it and may make your transition relatively easily.  You can still find PCs that give you the option of Windows 7 over Windows 8.  Windows 8 is a very good operating system; it’s just very different than XP or Windows 7.  The Mac platform has been mostly unchanged for 15 years and is a great platform as well.  If you have a lot of Apple devices such as iPhones or iPads, the Mac might be a great option, although it’s a bit pricy.  Whatever operating system best fits your budget and personality, please make an investment in updated security now, before your aging Windows XP system fails to stop a criminal whose goal is to control your hard-earned money.