{"id":16067,"date":"2019-08-13T09:10:04","date_gmt":"2019-08-13T17:10:04","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2019\/08\/13\/news-9810\/"},"modified":"2019-08-13T09:10:04","modified_gmt":"2019-08-13T17:10:04","slug":"news-9810","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2019\/08\/13\/news-9810\/","title":{"rendered":"Data and device security for domestic abuse survivors"},"content":{"rendered":"

Credit to Author: David Ruiz| Date: Tue, 13 Aug 2019 16:33:22 +0000<\/strong><\/p>\n

For more than a month, Malwarebytes has worked with advocacy groups, law enforcement, and cybersecurity researchers to deliver helpful information in fighting stalkerware\u2014the disturbing cyber threat that enables domestic abusers to spy on their partners\u2019 digital and physical lives. <\/p>\n

While we\u2019ve ramped up our detections<\/a>, written a safety guide for those who might have stalkerware on their devices<\/a>, and analyzed the technical symptoms of stalkerware<\/a>, we wanted to take a few steps back. <\/p>\n

Many individuals need help before stalkerware even strikes. They need help with the basics, like how to protect a device from an abuser, how to secure sensitive data on a device, and how to keep their private conversations private. <\/p>\n

At the end of July, we presented on data and device security to more than 150 audience-members at the National Network to End Domestic Violence\u2019s Technology Summit. Malwarebytes broke down several simple, actionable device guidelines for domestic abuse survivors. <\/p>\n

Let\u2019s take a look.<\/p>\n

Device security<\/h3>\n

Similar to our guide for domestic abuse survivors who suspected stalkerware was implanted on their devices, the following safety tips are options\u2014not every tip can be used by every survivor. The survivor who just escaped their home has different options available to them than the survivor who still lives with their partner, or the survivor being supported at a domestic abuse shelter\u2019s safe house. <\/p>\n

Taken together, we hope these guidelines will give individuals the information they need to stay safe in the ways that help them most. <\/p>\n

Create and use a device passcode<\/h4>\n

A device passcode is the first line of defense in device security. With it, you can prevent unwanted third parties from rummaging through your apps, reading your notes, viewing your messages and emails, and looking through your search history. It\u2019s simple, it\u2019s effective, and it\u2019s available on nearly every single modern smart device available today. <\/p>\n

When creating a passcode, create a string of at least six numbers that have no immediate connection to you. That way, another person can\u2019t guess your passcode by inputting a few important numbers, like your birthdate, your zip code, or select digits from your phone number.<\/p>\n

If you own a newer iPhone or Android device, you can also choose to lock your device by using your biometric information, like a scan of your face or thumbprint. <\/p>\n

Finally, while it may seem like an annoyance, you should set your device to require a passcode for every <\/em>attempted unlock. Some devices let their users keep a device unlocked if the passcode was entered within the past 10 minutes, or even an hour. Don\u2019t do that. It leaves your device unnecessarily vulnerable to someone simply picking it up and accessing the important data inside. <\/p>\n

Install an antivirus<\/h4>\n

Now that more cybersecurity companies are taking stalkerware seriously, you have a few options in best protecting yourself and your device. <\/p>\n

The free-to-download version of Malwarebytes, available for iOS<\/a> and Android devices<\/a>, as well as Mac and PC computers, both detects and removes thousands of malware strings that we\u2019ve identified as stalkerware. Even if you don\u2019t recognize the names of popular stalkerware products, we\u2019re still helping you find and remove them. <\/p>\n

The premium version<\/a> of Malwarebytes, which has a paid subscription, runs a 24-hour defense shield on your device, preventing stalkerware from being implanted on your device. <\/p>\n

Practice good link hygiene<\/h4>\n

Stalkerware typically gets delivered onto a device when someone clicks on a link that has been sent through an email or text. Because of this easy installation process, you should be careful with the links you click. <\/p>\n

Do not open any email attachments from unknown senders, and do not click on links sent in text messages from phone numbers you do not recognize. <\/p>\n

Check your notification settings<\/h4>\n

While helpful, the notifications that pop up on your device that tell you about the latest news alert or your most recent email have a security vulnerability. Depending on your phone settings, these notifications could reveal\u2014even on your phone\u2019s lock screen\u2014the subject line of an email, the sender, and even the first few words of a text message. <\/p>\n

To protect yourself, you can navigate to your device\u2019s system settings and find the specific settings for notifications, blocking them from revealing any details on your lock screen. <\/p>\n

On iPhones, you have the option of hiding all notifications, or choosing how notifications are shown: on the Lock Screen, on a pull-down menu, or in banners across the top of your device\u2019s screen. <\/p>\n

\"\"<\/figure>\n

On Android devices, depending on the model, you can again go into your system settings, find the notification settings, and choose whether your notifications will \u201cShow Content\u201d or \u201cHide Content.\u201d <\/p>\n

\n
\"\"<\/figure>\n<\/div>\n
\"\"<\/figure>\n

Update your software<\/h4>\n

This last step for securing your device has two huge upsides: It\u2019s easy to remember, and it\u2019s extremely useful. Updating your software is the simplest, most efficient way to protect your device from known security vulnerabilities. The longer your software goes without an update, the longer it stays open to cyber threats. <\/p>\n

Don\u2019t take the risk. <\/p>\n

Securing your sensitive data<\/h3>\n

Next, we\u2019re going to explain the many ways to secure the data that lives on your device. Maybe you\u2019re thinking of protecting photos that you will eventually send to law enforcement as evidence of abuse. Maybe you want to keep your private conversations private. Or maybe you\u2019re trying to protect the online accounts that you access<\/em> on your device. <\/p>\n

Here are a few ways to protect yourself. <\/p>\n

Use a secure messaging app<\/h4>\n

Secure messaging apps do just that\u2014they keep messages secure. By implementing a feature called end-to-end encryption, these apps prevent third parties from eavesdropping on your conversations. For many of these apps, even the companies that develop them cannot access users\u2019 messages, because those companies do not have the keys necessary to decrypt that data. <\/p>\n

There are several options today for both iOS and Android devices, and you may have heard their names\u2014Signal, WhatsApp, iMessage, Wire, and more. <\/p>\n

Because there are several options, the important thing to remember is that there is no one, perfect secure messaging app\u2014there is only the right secure messaging app for you. When choosing an app, think about what you need. The domestic abuse survivor who still lives with their partner might need to have their messages erased if their partner somehow finds a way into their device. The domestic abuse survivor with a new device might need to hide their phone number from new contacts. <\/p>\n

Here is a brief rundown of some popular secure messaging apps that offer end-to-end encryption:<\/p>\n