[Leo Salas (N5JEP)]

Practical Advice Without the Hype
Amateur radio operators spend a lot of time experimenting with computers, Raspberry Pis, radios, programming software, digital modes, remote stations, networking, and equipment obtained from many different sources.

That makes cybersecurity important—but it also means we should be careful about where our cybersecurity advice comes from.

A search on the Internet can produce hundreds of articles giving nearly identical advice. Many are simply rewritten from another website, may be outdated, or recommend settings and software without explaining why.

Before changing something on your computer or network because of an article, video, forum post, or social-media comment, verify it.

A Few Simple Habits Go a Long Way
Keep things updated.
Keep Windows, macOS, Linux, phones, browsers, radio applications, firmware, Raspberry Pi systems, and other software reasonably current. Security updates frequently fix vulnerabilities that are already known.

Use different passwords for important accounts.
Your email, QRZ account, radio-related services, banking, social media, and other accounts should not all share the same password. A password manager can make this much easier.

Turn on MFA whenever it is available.
Multifactor authentication can prevent someone from getting into an account even if they obtain the password.

Be suspicious of unexpected links and attachments.
A message appearing to come from another ham, a club member, or someone you know does not guarantee that person actually sent it. When something seems unusual, contact the person another way before opening it.

Download software from the original source whenever possible.
Radio programming software, SDR applications, digital-mode programs, drivers, firmware, Raspberry Pi images, and utilities should preferably come from the developer, manufacturer, or official project repository—not an unknown download site or someone’s repackaged copy.

Use the security already included with your computer.
Free does not automatically mean unsafe, and expensive does not automatically mean secure. Modern operating systems already include useful security features. Think carefully before disabling firewalls, antivirus protection, browser protections, or automatic security updates simply because an Internet post tells you to.

Back up what you don’t want to lose.
Logs, photographs, radio configurations, programming files, documents, and other important information should exist in more than one place. At least one backup should not remain continuously connected to the computer.

Before Following Cybersecurity Advice Online
Ask four questions:

1. Who originally published this information?
Look for the actual source rather than ten websites repeating the same statement.

2. How old is the information?
Computer security advice from several years ago may no longer apply.

3. Does the manufacturer or developer say the same thing?
Check Microsoft, Apple, the Linux distribution, equipment manufacturer, software developer, CISA, FTC, or another authoritative source.

4. Can I explain why I’m making this change?
If the only explanation is “someone online said this makes it more secure,” investigate a little further before doing it.

One Last Thought
Cybersecurity does not require expensive software or turning your computer into a fortress. For most of us, the greatest improvement comes from doing the basics consistently:

Update it. Protect the account. Verify the message. Watch what you download. Back it up.

And when somebody offers cybersecurity advice—including this document—there is nothing wrong with verifying it yourself.

Reliable Places to Check Cybersecurity Advice
U.S. Cybersecurity and Infrastructure Security Agency (CISA)
Federal Trade Commission Consumer Advice
Your operating-system or equipment manufacturer’s official support information
The official developer or project page for the software you are using

If you want to really test your ham radio network setup against a set of regulations, try NIST 800-171, Rev 2. Every ‘Department of _____ ‘ in the nation and their sub-contractors must bring their network standards to to at least this mark. Good luck with that challenge!

73, and stay safe—both on the air and online.
Leo Salas, N5JEP

• This topic was modified 3 weeks, 5 days ago by Leo Salas.

[Phillip Beall (W5EBC)]

Leo,

Thank you for putting this together. This is practical, understandable advice that applies directly to the mixture of computers, networks, software, digital modes and Internet-connected equipment many amateur radio operators now use.

I especially appreciate your emphasis on verifying cybersecurity advice instead of blindly accepting something merely because it has been repeated across multiple websites. Your closing summary—update it, protect the account, verify the message, watch what you download and back it up—is an excellent checklist for all of us.

Thank you for continuing to share your knowledge and experience with the Club.

73

Phillip Beall (W5EBC)

[Author]

Posts