00:09:46 Jocelyn Doire: That's a nice picture! 00:10:41 Chris Taylor, President OPCUG: https://click.convertkit-mail.com/4zup9owzppceh5xkmpvsxh679e777s5/x0hph6hw05pz2oa5/aHR0cHM6Ly9haXRlc3RraXRjaGVuLndpdGhnb29nbGUuY29tLw== 00:11:40 Chris Taylor, President OPCUG: https://aitestkitchen.withgoogle.com/ 00:13:52 Chris Taylor, President OPCUG: Welcome to all members and guests! Want to join the OPCUG? - https://opcug.ca/join-or-renew/ Everyone will be muted during the presentation. Feel free to use the Chat window to comment and ask questions. After the presentation, people will be able to unmute themselves. Please feel free to do so if you want to ask a question or make a comment Want to present at Q&A? Give us your material and we can create slides, or we have a PowerPoint template you can download and use: https://opcug.ca/downloads/Q&A-Template.potx Send in questions, shares, etc SuggestionBox@opcug.ca 00:15:32 Carol Pearson: Linda is your zoom on Monday the 27th still? 00:17:10 widya: very nice green 00:18:49 Tom Trottier: If recorded, the video & audio could be reused or uploaded to YoutTube. 00:19:49 Chris Taylor, President OPCUG: @Carol - it is on Monday the 26th and it is still on. 00:26:10 Tom Trottier: 🦾 00:26:37 Jocelyn Doire: https://www.miray-software.com/products/applications/hdshredder.html 00:27:01 Bob Gowan: Bravo Olly 00:28:49 KWG: Ditto…kudos to Chris. He and Alan have been godsend helpers to me on many occasions! 00:29:10 Chris Taylor, President OPCUG: What can be done to prevent SIM swaps? https://www.cbc.ca/news/canada/toronto/project-disrupt-sim-swap-arrests-1.7282288 https://opcug.ca/Reviews/ProtectPasswords.html https://opcug.ca/Reviews/KeePass.htm https://opcug.ca/presentations/keeping-passwords-safe.pdf https://www.grc.com/haystack.htm https://biblioottawalibrary.ca/en/program?text=pc+users https://www.itworldcanada.com/article/google-users-say-two-factor-authentication-didnt-protect-them-hashtag-trending-for-monday-april-15th/560424 https://www.itsolutions-inc.com/blog/articles/new-phishing-attacks-make-2fa-useless-updated/ 00:29:18 Bob Herres: Reacted to "Bravo Olly" with ❤️ 00:29:29 Bob Herres: Reacted to "Ditto…kudos to Chris..." with ❤️ 00:30:46 E O'Driscoll: About sim swaps: if the scammers contact your mobile phone carrier to change the telephone number perhaps a voice recognition test (not sure what the term is) would help? 00:31:53 E O'Driscoll: Good topic tonight - discuss the various risks. 00:32:19 Alan German (OPCUG Treasurer): @Elizabeth - As long as the scammer isn't using AI to clone your voice, perhaps from your voice mail message? 00:32:41 KWG: Reacted to "Bravo Olly" with ❤️ 00:32:44 KWG: Reacted to "Ditto…kudos to Chris…" with ❤️ 00:32:53 Tom Trottier: "monkey" is the most (mis)used password... 00:33:46 E O'Driscoll: Reacted to "@Elizabeth - As long..." with 👍 00:33:58 Natalie: Unfortunately, some sited have a shorter length limit for passwords. 00:34:05 Natalie: ...sites 00:35:35 Tom Trottier: unique=used only on one website 00:35:50 KWG: I’ve run into password lengths, too 00:36:52 Tom Trottier: https://en.wikipedia.org/wiki/Moonbeam_City 00:37:45 Harvey Hope: Recommend contacting your mobile provider to create a PIN and security question(s) to confirm your identity. 00:38:28 Tom Trottier: Some access email thru phone... 00:40:43 Tom Trottier: So you need the landline number for your phone co! in your wallet! 00:41:09 KWG: How prevalent is this? 00:43:16 Tom Trottier: Another factor you could use is a FIDO2 USB key 00:45:06 Tom Trottier: Also authenticator app like MS Authenticator 00:47:12 Allison: Maybe a silly question but if you are victim of a SIM swap do you still receive phone calls/text messages? 00:48:39 Tom Trottier: https://play.google.com/store/apps/details?id=com.azure.authenticator 00:48:52 Tom Trottier: https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2 00:54:26 Tom Trottier: ALL OF THE ABOVE 00:55:15 Natalie: OPL has the OPCUG session on Passwords from Chris now up for registration (on Oct 10th at Alta Vista branch). 00:56:23 Tom Trottier: I plan to live forever 00:57:59 E O'Driscoll: Below is a response from my bank when I asked for 2FA. They don't seem to use it everytime! 00:58:04 E O'Driscoll: Thank you for writing in. We do have a 2FA mechanism in place. We call the service a One-Time Verification Code or "OTVC". While there is no way to set up an OTVC at every login, instead an OTVC is triggered whenever there is a sensitive transaction that is taking place such as logging in at a new location or adding bill payments or adding e-Transfer recipients. Your account is protected. 00:59:29 bea: Tyhank you Chris that was great! 00:59:44 Natalie: Great info! 00:59:57 Bob Herres: Awesome! Thank you Chris! Password Security & 2FA, (Two-Factor Authentication) is now Top of mind, for Everyone! 01:00:08 Allison: Yes, great information, thank you! 01:00:35 Harvey Hope: Thanks Chris 👍 01:01:27 Natalie: Sadly, sometimes security when dealing over the phone, it sometimes comes down to the diligence of the agent & how easily they can be swayed/fooled. 01:01:31 E O'Driscoll: Thanks for the feedback Chris. 01:01:41 Tom Trottier: Nice! 01:02:30 Claudette: Where to get a security keyÉ 01:02:45 Natalie: RBC has a choice for the second factor: text, call, or security question 01:02:53 Glen: Are you vulnerable to SIM swap if you have a data only account on a MIFI hub and use VOIP. 01:03:02 Harvey Hope: TD Bank only requests 2FA periodically 01:03:39 E O'Driscoll: FYI - my bank is Simplii. 01:04:20 Allison: I'm with Simplii too and get the OTVC every time I login. 01:05:03 Stew Bruce: Desktop logins may not be the focus of security teams anymore as mobile devices are in the majority. 01:05:21 Stew Bruce: Biometric logins 01:05:54 Bob Herres: Reacted to "Desktop logins may n..." with 👍 01:07:30 Tom Trottier: Security is layered.... 01:08:18 Natalie: I forget if it was Rogers or one of my banks that makes me use a PIN on the phone for verification. 01:08:31 Rosemary: Could use a different username than an email? 01:11:06 Claudette: Which password managers do you recommend? 01:12:49 Jocelyn Doire: KeePass works well for me: https://keepass.info/ 01:12:56 Chris Taylor, President OPCUG: @Claudette - see the URLs I plugged into the chat at the start of my talk. Personally, I use KeyPass - free and open source 01:13:12 Lynda Buske: I agree on KeyPass 01:13:50 Jocelyn Doire: It's free and Open Source 01:13:59 Alan German (OPCUG Treasurer): KeePass is also multi-platform - Windows, Linux and Android 01:14:10 Claudette: Thank you all for your suggestions. 01:15:28 Ma Vo: Once you manage to get the phone company to require that you show up in person... the WHO declares a new pandemic and requires everything to go in lock-down 01:15:36 Allison: I am looking forward to the bridge presentation next week. :) 01:15:47 Rosemary: Reacted to "I am looking forward..." with 😃 01:18:05 E O'Driscoll: It would be very good to have the option for remote help. 01:18:09 E O'Driscoll: Great idea. 01:18:23 Carol Pearson: it's lot of extra work though for those knowledgeable 01:18:44 Natalie: That's a very generous offer, but might get to be a lot on your end! 01:20:13 KWG: Linux conversion! 01:21:01 E O'Driscoll: Excellent discussion tonight! 01:21:22 Chris Taylor, President OPCUG: Lynda Buske is giving a lecture on close-up photography Monday, August 26th, 7:00 pm - 8:00 pm Join via this zoom link https://us02web.zoom.us/j/85989857981?pwd=waE1zs29Z1IUelpRIKSr6zBBqNg02W.1 01:22:25 Natalie: Thanks 🙂 01:22:28 Rosemary: Thank you 01:22:34 Bill: Thanks everyne 01:22:43 Timothy: thanks