Thursday, July 9, 2015
Why I Subscribe to Podcasts
Sunday, July 5, 2015
What Are Your Favorite Books
Monday, June 29, 2015
Podcast Review:This Week in Science
- Posted using BlogPress from my iPhone
Sunday, June 21, 2015
Book Review - Better Than Before
By Gretchen Rubin
There are tons of self improvement books out, and countless articles on the Internet--my own extremecommonsense.net among them. This book stands out from the piles because it boils valuable ideas to a couple useful models and offers guidance to applying them to your life.
The bulk of the book organizes and details 21 strategies for implementing habits to change your life. The first few are universal and obvious -- once the author has pointed them out. Others work for some people and not others. Taken together, they offer a solid toolkit for changing habits, one of the most important skills you can have for self improvement.
Taking the Long View
Friday, June 5, 2015
One Step at a Time
What is Charity Miles?
Here's how the organization describes itself on the charitymiles.org website.
Charity Miles is a free iPhone and Android app that enables people to earn corporate sponsorships for charity while walking, running or biking. We are supported by awesome companies like Humana, Johnson & Johnson, Timex Sports and Kenneth Cole.
I have used the iPhone version of this app for some time and could not recommend it until the latest release fixed some annoying problems. Since they are solved, there is no reason to list them. By using it to record your exercise, you direct a small charitable donation to any of over 30 worthwhile causes.
If you like, and only if you like, you can post your result to Facebook or Twitter. Here is one tweet I sent:
I ran 4.6 @CharityMiles for @Habitat_org. Thanks to #JNJ for sponsoring me. #NationalRunningDay #GlobalMoms globalmomsrelay.org
This is a bit misleading since I walked rather than ran these 4.6 miles. Even so, this looks like a good deal.
I do something I would be doing anyway.
A reputable corporation gets acknowledged for its charitable program.
A worthwhile charity of my choosing gets a small contribution based on the miles I walk.
In 2010, I set a goal to lose 40 pounds. It took me six months to achieve that goal and most of that success came from recording what I ate and what exercise I did. Since then I have logged over 7000 miles and worn out more than one pair of walking shoes. Charity Miles doesn't keep this kind of record, but it does make you conscious of your activity. Make a difference in your life and the lives of others by installing this app and counting your miles for a good cause.
Charity Miles is available to download for free in the iPhone and Android app stores.
Saturday, May 23, 2015
Avoiding The Trap
In my last article, I told the story of how I (barely) avoided a credit card phishing exploit because I became suspicious while I cooperatively gave my card number to an anonymous voicemail system out to scam me. While I managed to avoid significant damage, this is neither the standard I aspire to nor one I recommend for you. This time, in the spirit of continuous improvement,!let's consider how to do better by avoiding the trap.
What Happened?
The short version is that I received a text message appearing to be from my bank claiming that my card had been locked and telling me to call an 800 number. The full story us here: http://www.extremecommonsense.net/2015/05/you-can-be-too-careful_17.html?m=1
Scammers depend on greed, fear, and psychology so we feel compelled to act quickly and stupidly. In my credit card example, I fell for the bait and started giving my information in moments, mostly out of fear. I needed to slow down a little and think. By answering a few key questions, I could have done that.
Key Questions
We tend to speed up, not slow down, when we feel threatened. If the threat is real, this is a survival skill. If not , it may be a trap. We control this by asking appropriate questions.
How urgent is this?
In my example, I got a Saturday evening text message that my credit card had been locked. Even if true, I wouldn't use the card for 14 hours at the earliest. If someone had tried to tamper with my account, the bank had parked it into a safe condition. There was nothing urgent in this. It just felt urgent.
Who Sent the Message?
On the surface this looked like a customer service notice from the bank. It could be, and actually was, from a scam artist. Since this wasn't urgent, I should have taken the time to be sure.
How Can I Be Sure?
There are two basic strategies available. First, check everything you can. Second, contact the bank directly, either through a prearranged number or their approved email address. Let's look at both.
In the previous article, I described oddities in the text of the message. There was no indication what account was involved. The language, though grammatically correct, was capitalized oddly.
This was a text message which revealed a real US phone number in my area code. While this is plausible, using Whitepages to do a reverse number lookup identified it as a mobile phone.
Finally, what about the number to call? It is possible to do a reverse lookup on an 800 number but even a legitimate number may say only that it is a U.S. phone. Even so, no harm in trying.
What Am I Being Asked to Do?
For the moment, let's ignore that you're being asked to call an unknown number, by a text message of unknown origin, and focus exclusively on the conversation that would follow.
In my case, an automated voice mail identified itself as the bank's activation service. Since the card was already active, this should have raised an alarm. It no doubt picked up what it could about me from caller ID and asked for my full card number, then the expiration date. When it asked for the PIN I (finally) got suspicious and stopped. This was too much information, not enough confirmation.
So, What Instead?
There are several ways to check with the bank safely. What I did was call the number the bank printed on the card. This led to s human customer service representative who asked for only the last four digits on the card and a prearranged question. Record that phone number so you have it if the card is lost or stolen. I asked them to replace the card.
By contrast, when the new card arrived I went through the real validation process. The system asked for the last four digits of the card and considered that enough since I had called from the phone number it had on file for me.
Other Options
Your second option is to email the abuse group at your bank. If you don't have the address you can search for it online. Include as much information as you can. You'll get an automated confirmation at once and a followup later. This is fine if things aren't really urgent.
If you have a smartphone, odds are they offer a custom app to connect you to your account. You can use this to check the status of your card. It may also offer a secure messaging service to safely inquire in more detail.
Finally, you can go to a bank website from a browser. Just use URLs the bank gave you in advance. Never follow a link from an email or text message.
How Is This Possible?
The message was convincing only because it used the name of my bank. The 800 number I called also identified itself using the name of my bank. Since it came as a text message, they apparently had my bank and my phone number.
Where would that information have been available? I can't be sure. Late in 2013, I made a credit card purchase at Target, which days later discovered and closed a data breach. I replaced the card after that, but not the bank.
Summary
My experience with this has led to one simple rule: if you get a message that suggests a problem may exist, find a way to check it out without using numbers or links the measage provided. Beyond that, have multiple ways you can reach a bank quickly if an alarm is raised.
Sent from my IPhone