What wrong with my typing?

Can you figure out what wrong with my typing? I attempted to install Turbo Tax. When this web page asked me to install the add-on. I stopped and take a second to figure what I typed wrong.

Clear my browser cache, history, cookies before close the browser and go to the legitimate web site.

Make a habit: slow down and look.

Protect Yourself from Social Security Scams | SSA

From https://www.ssa.gov/scam/
--------------------------------------------------
Criminals continue to impersonate SSA and other government agencies in an attempt to obtain personal information or money.
Scammers might call, email, text, write, or message you on social media claiming to be from the Social Security Administration or the Office of the Inspector General. They might use the name of a person who really works there and might send a picture or attachment as "proof."
-------------------------------------------------- 

 

Fw: Vietnam Airlines thông tin về sự cố bảo mật dữ liệu / Information from Vietnam Airlines Regarding Customer Data Breach

FYI. ICYMI

I myself put a FREEZE on my credit report few years ago and monitor it frequently.

https://www.usa.gov/credit-freeze

https://haveibeenpwned.com/breach/VietnamAirlines

From: Vietnam Airlines <no-reply@e-news.vietnamairlines.com>
Sent: Monday, October 13, 2025 8:58 PM
Subject: Vietnam Airlines thông tin về sự cố bảo mật dữ liệu / Information from Vietnam Airlines Regarding Customer Data Breach

Kính gửi Quý Khách,

Vietnam Airlines xin thông báo về sự cố bảo mật dữ liệu liên quan đến nền tảng chăm sóc khách hàng trực tuyến do một tập đoàn công nghệ toàn cầu vận hành. Theo thông tin từ đối tác, Vietnam Airlines là một trong nhiều doanh nghiệp trên thế giới đang sử dụng dịch vụ của đơn vị này bị ảnh hưởng. Một phần dữ liệu khách hàng được xử lý trên nền tảng này có thể đã bị truy cập trái phép.

Ngay sau khi nhận được cảnh báo, Vietnam Airlines đã nhanh chóng phối hợp với các cơ quan chức năng, chuyên gia an ninh mạng và đối tác công nghệ để điều tra sự cố, đánh giá phạm vi ảnh hưởng và tăng cường các biện pháp bảo vệ dữ liệu.

Một số thông tin cá nhân có thể bị lộ, bao gồm họ tên, địa chỉ email, số điện thoại, ngày sinh và số hội viên Lotusmiles. Đến thời điểm hiện tại, các dữ liệu nhạy cảm như thẻ tín dụng, thông tin thanh toán, mật khẩu, hành trình, hộ chiếu và số dư tài khoản Lotusmiles vẫn được bảo mật an toàn và không bị ảnh hưởng. Các hệ thống công nghệ thông tin nội bộ của Hãng hoạt động bình thường.

Để bảo vệ thông tin cá nhân, Vietnam Airlines khuyến nghị Quý khách nên đổi các mật khẩu tài khoản Lotusmiles và email liên kết, cảnh giác với các hình thức lừa đảo giả mạo, thư điện tử hoặc cuộc gọi đáng ngờ mạo danh Vietnam Airlines, và không chia sẻ thông tin cá nhân hay mã OTP, không đăng nhập vào các hệ thống chưa được xác thực.

Vietnam Airlines chân thành xin lỗi vì sự việc này và những lo ngại có thể gây ra cho khách hàng. Hãng sẽ tiếp tục cập nhật thông tin, đồng thời thực hiện mọi biện pháp cần thiết để tăng cường bảo mật dữ liệu và duy trì niềm tin của hành khách.

Nếu có câu hỏi hoặc cần hỗ trợ, Quý khách vui lòng liên hệ Văn phòng Bảo vệ Dữ liệu của Vietnam Airlines qua email: dpo@vietnamairlines.com hoặc đường dây nóng 24/7: 1900 1100 (tại Việt Nam), 1900 1800 (dành cho hội viên Lotusmiles tại Việt Nam) và +84 24 3832 0320 (gọi từ nước ngoài).

Trân trọng

Vietnam Airlines

---

Dear Valued Customer,

Vietnam Airlines would like to inform you of a recent data breach involving a third-party customer service platform operated by a global technology partner. According to the service provider, Vietnam Airlines is among several global companies using its services that have been affected by this incident. A portion of customer data managed on this platform was accessed without authorization.

Upon being alerted, we took appropriate actions to coordinate with relevant authorities, cybersecurity experts, and the third-party partner to investigate the breach, assess potential impact and contain further unauthorized access to its system.

Some personal information may have been exposed, including full name, email address, phone number, date of birth, and Lotusmiles membership number. At this time, data such as payment information, passwords, travel itineraries, Lotusmiles balances, and passport details remain secure. Additionally, Vietnam Airlines' internal IT systems were not affected.

To help protect your personal data, we recommend changing the passwords of your Lotusmiles and associated email accounts, staying alert to potential phishing attempts, suspicious emails or phone calls impersonating Vietnam Airlines, and avoid sharing information, one-time passcodes (OTPs), or login credentials with unverified sources.

Vietnam Airlines sincerely regrets any concern this incident may have caused. We are committed to keeping potentially affected customers informed with relevant updates as the investigation continues.

For any questions or assistance, customers are kindly requested to contact Vietnam Airlines Data Protection Office at dpo@vietnamairlines.com, or via 24/7 hotlines: 1900 1100 (for calls within Vietnam), 1900 1800 (for Lotusmiles members calls within Vietnam), and +84 24 3832 0320 (for calls outside Vietnam).


Your sincerely,

Vietnam Airlines

Note to self - New Kind of Scam

Is is generated by AI (Artificial Intelligence)?

'

 

From: https://www.bbb.org/scamtracker/lookupscam/851719

re- authorized purchase of a PlayStation five special edition with pulse 3D headset is being ordered from my Walmart account for an amount of $919.45

  

How to protect yourself from tax identity theft this season

Read more at 

https://www.cnbc.com/2024/01/18/how-to-protect-yourself-from-tax-identity-theft-this-season.html

Got one today 😖

Cybersecurity - Think before click

While I stepped on the hospital elevator on Tuesday, I got a MSFT Authentication request as in the picture.




Someone try to hack my account. Deny.
It's better to IGNORE rather than press Deny since I may press on the number by mistake.
Check the activity, the attempted login was in North East.


To be safe, I changed my password.

Slow down to have a peace of mind.
V





-—
"Trust in the LORD and do good that you may dwell in the land and live secure."
(Psalms 37:3)

The Truth About Temu: Complaints and Concerns | Time

Excerpt from
https://time.com/6243738/temu-app-complaints/

But the company—the U.S. offshoot of Chinese e-commerce giant Pinduoduo—is also starting to develop a reputation for undelivered packages, mysterious charges, incorrect orders, and unresponsive customer service. Temu has already been subject to more than 30 complaints to the Better Business Bureau, and has a BBB customer rating of less than 1.5 stars.

Aussie PM says, “Shut down your phone every 24 hours for 5 mins” – Naked Security

Aussie PM says, "Shut down your phone every 24 hours for 5 mins" – but that's not enough on its own – Naked Security

https://nakedsecurity.sophos.com/2023/06/23/aussie-pm-says-shut-down-your-phone-every-24-hours-for-5-mins-but-thats-not-enough-on-its-own/

I also do the following additional security measures:

• Turn off computer overnight. To me, it's a painful to wait for 10 minutes for my computer boot up.
• Remove unnecessary and not use applications out of computer and smartphone .
• Back up and back up.

ShredOS

Used ShredOS to clean old computer before go to electronic waste or recycling center.

It took nearly 7 hours to wipe just one round.

Install the Ubuntu after sanitize the hard drive.

Don’t answer another online quiz question until you read this | Consumer Advic

A good advice from U.S. Federal Trade Commission (FTC):

One major way to protect your personal information — in addition to maintaining strong passwords and using multi-factor authentication — is to steer clear of online quizzes…or just don't answer them truthfully. As for accounts that require actual security questions, treat them like additional passwords and use random answers, preferably long ones, for those too. Asked to enter your mother's maiden name? Say it's something else: Parmesan or another word you'll remember. Or use a password manager to store a unique answer. This way, scammers won't be able to use information they find to steal your identity.

Read more at:

https://consumer.ftc.gov/consumer-alerts/2023/01/dont-answer-another-online-quiz-question-until-you-read

How to validate Libre Office on Mac

For a peace of mind, spend a minute to validate the downloaded file from internet.

Get information from https://download.documentfoundation.org/libreoffice/stable/7.0.4/mac/x86_64/LibreOffice_7.0.4_MacOS_x86-64.dmg.mirrorlist

File information
Filename: LibreOffice_7.0.4_MacOS_x86-64.dmg
Path: /libreoffice/stable/7.0.4/mac/x86_64/LibreOffice_7.0.4_MacOS_x86-64.dmg
Size: 252M (263941643 bytes)
Last modified: Fri, 11 Dec 2020 23:57:25 GMT (Unix time: 1607731045)
SHA-256 Hash: 0fcd83399609780013aee1acc805d1380434118d459829908aa409f7eb67c4e7
SHA-1 Hash: 443de571dad8e412e8b9e4be52ad5b249cc2627f
MD5 Hash: a36fd3c1d5e8935e4732cbf0f826a821
BitTorrent Information Hash: 636f6abbb3ed784831da6385686b1577538e8a39
PGP signature available

Run this command on MacBook: 
openssl dgst -sha256 LibreOffice_7.0.4_MacOS_x86-64.dmg
SHA256(LibreOffice_7.0.4_MacOS_x86-64.dmg)= 0fcd83399609780013aee1acc805d1380434118d459829908aa409f7eb67c4e7

Compare this SHA256 value against with value got from LibreOffice web site above.

How to validate KeePassXC on Mac

Per https://keepassxc.org/download/#mac

Before installing KeePassXC, you should always verify that your download matches the signature that is published alongside the release package! 

openssl dgst -sha256 KeePassXC-2.6.2-2.dmg

Compare the result with value in KeePassXC-2.6.2-2.dmg.DIGEST downloaded from KeePassXC web site

Validate Downloaded Keepass 2.45 on Windows 10

Ran CertUtil and compare with value on https://keepass.info/integrity.html

C:\>certutil -hashfile KeePass-2.45.zip SHA256
SHA256 hash of KeePass-2.45.zip:
d414db9d411acbafd4e1b5faa8605ad7a28829f1814ce779142ffbd5ca9c3794
CertUtil: -hashfile command completed successfully.

C:\>certutil -hashfile KeePass-2.45-Setup.exe sha256
SHA256 hash of KeePass-2.45-Setup.exe:
9058cc9d44129e8c2c902e21f8678974b789ecd8f9d6add81c98fbeaf9794e23
CertUtil: -hashfile command completed successfully.

Per https://keepass.info/integrity.html:

If you want to verify the integrity of your downloaded file, you can hash the file (for instance with one of the following utilities: Visual Hash Calculator, ReHash, MD5sums) and check whether the computed hash matches the one listed below.

OpenPGP signatures can be verified with the public key.

KeePass-2.45.zip:
MD5: 5E838DA8 5050A5C6 DFABB0D6 57C10025
SHA-1: 7EFDC08F BC69D911 A40D29FC 3CA744D2 763C49DF
SHA-256: D414DB9D411ACBAFD4E1B5FAA8605AD7A28829F1814CE779142FFBD5CA9C3794
Size: 3039842 B
Sig.: [OpenPGP ASC]

KeePass-2.45-Setup.exe:
MD5: 5BAAADAA 21098D63 5BB37782 CD9E6446
SHA-1: 68B0A6E5 042A2524 530156C9 34D47E20 C3BC684A
SHA-256: 9058CC9D44129E8C2C902E21F8678974B789ECD8F9D6ADD81C98FBEAF9794E23
Size: 3171656 B
Sig.: [OpenPGP ASC]

Check for Conexant Audio Driver Keylogger

Even you don't have HP computer, to be safe, you should make a quick check to see your computer have Conexant log file: MicTray.log or any file name begin with MicTray

Further reading:

1. Arstechnica: HP laptops covertly log user keystrokes, researchers warn
2. SpiceWork: Keylogger in HP audio driver
3. InfoWord: HP computer owners: Check for the MicTray Conexant keylogger

Windows as a service

I did not know about that until I received an email from US-CERT few days ago regarding to Microsoft Ending Security Updates for Windows 10 version 1507. I thought Windows 10 released two years ago should have couple years before ending support like Windows XP, Windows Vista, Windows 7... This surprise led me to do more research. Quick guide to Windows as a service had a clear explanation.

So I went to check my Windows 10 version. It was 1511.

To be safe, it should be upgrade to the latest version. But, I got this error: "There were some problems installing updates, but we'll try again later. If you keep seeing this and want to search the web or contact support for information, this may help: (0x800705b4)". It took me at least five hours to research for the solution.

Finally, my goal to upgrade achieved after I downloaded Microsoft Windows Update Assistant to help me update to the latest version of Windows 10. Another three hours to upgrade from Windows 10 version 1511 to Windows 10 version 1703 (build 15063). Well, my familiar terminal window "Command" was hidden and Window PowerShell is a default.

How to disable Adobe Flash in FireFox, Google Chrome, Safari and Internet Explorer

Adobe Flash is a nice product and essential tool to surf the web. However, it have big security issues recently. Many security experts recommend not install it. I cannot get rid of Adobe Flash since sometime I need it. So, I make a change to browser to enable them on demand.

Firefox: Type "about:addons" on address bar or Ctrl-Shift-A to manage Add-ons and set "Shockwave Flash to "Ask to Activate"

Google Chrome: Type "chrome://plugins/" on address bar

Safari: Go to References -> Security -> Click on "Plug-in Settings..." next to "Internet Plug-in" check box.

Internet Explorer: Internet Options -> Program -> "Manage Add-on" button

Java Vulnerability

After learning about Java vulnerability from the Department of Homeland Security's United States Computer Emergency Readiness Team (US-CERT), I checked all my browsers in all computers: Ubuntu Linux, Apple Mac OS X, and Microsoft Windows to make sure Java is disabled. To test whether Java is working on my computer, go to this URL http://java.com/en/download/testjava.jsp

Here are the screenshots from my Windows computer:

Java was disable on Google Chrome 23 on Microsoft Windows. Oops. I need to update Google Chrome to the latest version Google Chrome 24. Always keep your browser up to date.

'No working Java was detected on your system.' Good. Java was disabled on Mozilla Firefox 17. Again. I will update Firefox to version 18. On Ubuntu, it was 'Something is wrong. Java is not working'.

Java was disabled on Microsoft Internet Explorer 9.

Next, I went to Control Panel to update Java to the latest version Java 7 update 10 and unchecked the check box 'Enable Java content in the browser'.

 Before clicked the 'Apply' button

After clicked the 'Apply' button

Unchecked the 'Keep temporary files on my computer'

Internet Explorer after unchecked the check box 'Enable Java content in the browser'

Java was disabled on Opera ran on Ubuntu 12.10

Java was disabled on Safari ran on Mac OS X Lion 10.7.5 

Should I provide my social security number when I apply job online?

The answer is NO.

First, I'm not sure my social security number is safe on their site. Is it a legitimate web site?

Second, it's not make sense. Any one asks his or her date the social security on first date? From application to interview and from interview to the job offer is a long and tough process. Hiring manager will interview about 1% job applicants and will extend job offer to 1 or 2 candidates among people they interviewed. I will provide my social security number only I accept the job offer and start fill out W-4 Employee's Withholding Allowance Certificate and I-9 Employment Eligibility Verification forms.

Provide social security number, driver license, your home address and birth date are not guarantee you get the interview. However, you have more risks.

Thus, I follow the advise from others to enter the phrase 'Available upon job offer' or '000-00-0000' on the online application. If the validation rule is not allow me to bypass the social security number, I will not bother to apply and file a complaint to FTC. Why hiring company or recruiter talk about job requirement, experience, skills, salary, benefit, and company culture first?

Congress should make a law to prohibit company collect the social security number on job application.

Good luck with your job search.

More info:

• http://answers.yahoo.com/question/index?qid=20100317150012AAsb8v3
• http://humanresources.about.com/b/2012/02/06/you-want-my-social-security-number.htm 
• http://www.soyouwanna.com/apply-jobs-online-social-security-number-required-6540.html
• https://www.privacyrights.org/fs/fs25-JobSeekerPriv.htm/

Don't click on the link from any email begin with "wow this is crazy you should give it a look"

Recently I got many emails claimed from my friends, my relatives and my family. Their subject line had a simple word such as "hi", "hey", "Fwd:" or "re:". The body had only one sentence begin with these words:

"wow this is crazy you should look into this ..."

"you should check this out ..."

"this is crazy you should give it a look ..."

"check this out wow ..."

"wow this is crazy you should give it a look ..."

Since senders are in my contact list, these spams bypassed spam filter and landed in my inbox. All from Yahoo account and sent from oversea. It looked like these Yahoo emails were hacked. If you are using Yahoo, check your Sent folder to see any unauthorized emails sent out. If your Yahoo was hacked and sent the spam, you should:

1. Changed your password immediately.
2. Scan your computer for virus, trojans. For Windows computer, download Microsoft Security Essentials, a free anti-virus software from Microsoft, at http://windows.microsoft.com/en-US/windows/products/security-essentials. For Mac OS computer, download Sophos Anti-Virus for Mac Home Edition at http://www.sophos.com/en-us/products/free-tools/sophos-antivirus-for-mac-home-edition.aspx. For Ubuntu, GNU/Linux get ClamAV,  an open source (GPL) antivirus engine designed for detecting Trojans, viruses, malware and other malicious threats. 

I agreed with James Snider in his blog post:

In today’s world, you just can not click links or open files that people email you. There are no trusted people. Viruses get on their computer and they will never know it.

Not only Yahoo email users had this problem but Hotmail too. Greg Lirette detailed his experience in "Spam sent from my Hotmail account".

That why I'm using Gmail and two-step verification and separate Yahoo, Hotmail accounts for difference tasks: social, testing, mailing list subscription, registration, personal finance, professional ...

For more info:

1. Prevent Sending Spam with my Yahoo Account? (http://superuser.com/questions/413734/prevent-sending-spam-with-my-yahoo-account)
2. The Palantír byjamessnider (http://jamesbsnider.wordpress.com/2012/04/15/the-palantir-8/)
3. Yahoo! Account Help - What to do if your account is sending spam (http://help.yahoo.com/kb/index?locale=en_US&page=content&y=PROD_ACCT&id=SLN3417&impressions=false)

Do not open any attachment in email claimed from Postal Office

This morning I went to US Post Office to send back a laptop battery to the Seller. In the evening, I found an email in Junk folder with subject 'Your parcel is available for pickup‏'. I almost attempted to open it. " Something wrong with my shipping..." I thought. But, I recalled a big red box "ALERT: Customers be aware of fraudulent package delivery messages sent by email or phone." when I was at USPS.com website few minutes prior. Thus, I did not click on the attachment.

The faked email sent from:

Received: from pacifica by dime127.dizinc.com with local (Exim 4.69)
(envelope-from )
id 1SMRM5-0004tD-Qo
for user@example.com; Mon, 23 Apr 2012 18:03:34 -0400

I'm feel I'm lucky. Always be vigilant and be smart… on the Net