Hackers Stole our Camera! Learn to Protect your Gear & Photos

[@TonyAndChelsea]

📚 Buy Our Books on Amazon! 📚 📕Stunning Digital Photography: help.tc/s 📘Lightroom 6 Book: help.tc/l 📙Photoshop Book: help.tc/p 📗Buying Guide: help.tc/b

[@TonyAndChelsea]

Since posting this video we've learned that you can report this type of fraud to your local FBI office or the Internet Crime Complaint Center. Several people have told us the FBI recovered their losses and started investigations into fraud schemes that have ended in prison sentences.

[@thegreatscode]

Tony & Chelsea Northrup I've reported someone from Facebook trying to route money from "Nigeria" to the FBI internet fraud and they were quickly deleted.

[@Jeff-jg7jh]

They can take a onerous occasion and make it into something interesting and educational.

[@Weredawg]

Hacked my way to the third comment. Being first is too suspicious

[@RobertsonDMcI]

Spotted 'hacker' with hand-held scanner on a crowded street in my neighborhood, working the crowds: wallets in pockets, purses on strollers etc. I followed him with my trusty DSLR in video mode, taking a couple of clips sufficient to show his actions with the scanner & identify his face, then I dropped in to a local police station hoping for some interest. "Your crazy, it's impossible" the police officer at the desk admonished me when I told my tale. She refused to open a file on my complaint even when I explained that the video clearly showed the perp's face as he did his deed ... thinking it might be useful for any local beat cops to keep a lookout for him in action. The desk cop insisted that I was wrong with my information, that this sort of illegal scanning took place ony at check-out stations in stores etc. I persisted and asked her to at least look at the memory card. "We can't do that" she exclaimed. I said "Why not?" She replied, "You might place a virus on our computer!"

[@ShadowLacheisis]

David Robertson Great story. I can't believe the cop didn't even file your complaint. I find many people and companies lack understanding that scam artists/hackers are clever individuals and aren't the stereotypes seen on tv. Their attitude toward security is either considering it an obstacle or that it's somebody else's responsibility. Interesting that local police are usually ill equipped to dealing with cyber crimes but the one case where they could have done something (like apprehend the guy in your story), they failed to even act.

[@andykww]

I have a background in software engineering but not cyber security. So a lot of this stuff is still new to me. Tony is such a dark horse.

[@irenem1357]

Oh my gosh, this happened to me!! I put my gear on E-Bay and someone said they were interested in buying all the gear, which I had put in the description that I was selling all the gear as one unit. He asked me to send him pictures of the top and bottom . I sent it to him using the "REPLY" option on the email. This email came through E-Bay. So I sent him the pictures, he said he would like to buy all my gear. It cost $330.00 to ship it to NYC. I researched the the name of the person on his E-Bay account and he had great ratings. His account he had since 2008. So I figured he was ok. Before I shipped it I got a notice from EBay and Paypal that the money was in my account. So I sent the gear, went to Paypal to get my money and it was NEVER there. The EBay and PayPal notice was a Forgery. This guy also hacked into the EBay member's account so when I looked it appeared legit. I contacted EBay and they would not do anything because I sent him an email to his personal email, which was fake also.I thought I was talking to him through EBAy. So, the takeaway here is if they are requesting you to send it to anyone other than there own name, and residence. Don't do it!!! I am out all my gear, and gear worth $10,000. My heart is broken. Thankfully I am not a professional photograph and don't make my living from my gear. I am sorry this happened to you. Sometimes, people suck.

[@VirtualAviationAviator]

I lost $1300 in 2005 selling computers online. Received two counterfeit postal money orders for $1700 only to have the bank change it back to my account about 3 weeks later. Then I decided to self finance computers and sell them in a retail store, on credit; bad idea. Literally gave them away for a 10% down payment. Dateline NBC did a wonderful article where they tracked merchandise stolen with fake money. It was pretty much just as the Northrups described - they always use mules to re-ship overseas.

[@omeshsingh8592]

"Notice of Recognition of Extraordinary Loss,"

[@nagual2335]

hahahahahahahaha

[@AeroPR]

Omesh Singh Best comment of the year!

[@SPDTDL]

Omesh Singh nice

[@joebeard7387]

Amazon USA, ship parcels to the UKA which imo can be tracked from Europe by purchasers eg for delivery time.

[@Jeff-jg7jh]

I don't get it.

[@timothylinn]

The thing I admire most about you guys is how you handle negative situations and criticism. You almost always take the high road and don't seem to let anything bother you too much. It's a great example of the right way to do things. I'm sorry about your losses. That's not pocket change.

[@LukeKroeker]

Crashplan has good versioning (unlimited versions), unlimited storage, and multiple computer support for "family" use, but any "live" backup sets use up a fair bit of memory. I've been using it for a few years now, and it's worked well (though recovery/restore is a bit cumbersome, any deleted files can be recovered which is great and works well for 'cold storage'). If you're worried about upload speed just ship the backup service a hard drive with all your stuff on it to get a starting point set so it can simply track the changes (same goes for restore). I also have an IT background, so I found this video very interesting. :) Random passwords aren't actually much more secure. I read somewhere that using a set of unrelated strings (15+ chars) is actually more secure (because you won't need to write it down).

[@CajunCoding]

Another vote for Crashplan... it is a little more cumbersome to use than some other interfaces, but it works really well and can do both cloud and peer to peer backups between friends pc's etc. The peer-to-peer backup is free with the application you only pay for cloud backup storage. Been using it for years and it works very well. And it keeps many versions of every file (the number and frequency of versions is configurable) so you can restore a copy from yesterday, last week, or last year.

[@kevinelp]

+1 Crashplan has work well for me for years. Best feature is using using a local backup server(s) in addition to the cloud. Local server is fast for the majority of tasks, and the cloud is your offsite if your house burns down.

[@teodoreh]

After being stolen by someone living in the USSR, Tony will never send again gear to countries like Czechoslovakia, East Germany or to Austria-Hungary Empire! ;D

[@DonnaInForma]

Teodore Hatzikostas LOL and Yugoslavia anyway

[@CesarinPillinGaming]

No mention of the Ottoman Empire? HERESY!

[@MarcinVoyager]

Teodore Hatzikostas Atlantis is also on the no-no list.

[@helmutkoch2440]

East Germany... :)

[@jmourgos55]

childish humor

6:25 Yugoslavia? Really? It's 2017.

[@diogod126]

Yugoslavia in 2k17 LUL

[@dr.sommer5069]

Dragoljub Radovanović They even dont know the names of the countries having bombed down any more, because these are that much.

[@tamasvarga67]

... and wonder why they are hacked? :)

[@dr.sommer5069]

Tamas Varga 😅😅😅👍

[@MylesLacey]

Maybe back to the Future....1991 :) :)

[@alexrowland]

I've got a bunch of camera gear on eBay right now.. Thanks for multiplying my stress factor for the next week!! In all seriousness, this was all great advice. So cool to hear you used to be in the cybersecurity field! I'm currently finishing up some education to go into that. Why did you get out??

[@jeffg3563]

For cloud backups, I've used a Synology NAS for years an I love it. I also use Dropbox, Google Drive, etc, but the storage/speed limitations, and cost, keep me from using them for anything serious. The 2-bay Synology drives are relatively inexpensive now, and allow you to have multi-terabytes of backup storage. The built-in Cloud Station app lets you do automated cloud backups from your PC's just like any of the online services. For offsite protection in case of a fire or theft, ask a friend or family member if you can keep it at their house. Or buy a second one and use the built-in Cloud Station ShareSync feature to replicate your cloud backup to another offsite NAS. The Synology Quickconnect feature makes for easy connection across different networks, no router firewall setup, etc.. Great video. Reminds me to stay vigilant.

[@pmb6667]

Great comment! Synology is *exactly* what I use, and I love it, too! I have two 4TB drives in both NAS devices. One is connected online, the other is not. I'm also going to get another NAS to keep off-site.

[@BuddyandCharlie]

I don't suggest keeping passwords stored in the browser. Especially Chrome. Chrome allows you to set up an account as the first feature in settings so that you can sign in on another computer and have access to all passwords, history, bookmarks and or settings etc. Someone getting access to your computer can allow them to set up an account if you haven't used this feature. Few people do. (and how often do you look to see if someone has.) Now they have access to everything. Your bookmarks and history leads them to all your accounts, and even updates if you change passwords or setup new accounts. Use a password storage app to store passwords. Keepass is a really good one. It is free, open source and updated often. The passwords are kept in a single file encrypted database, but can also have many different database files as well. You can put the database file in a cloud storage like google or dropbox if it's linked to your computer, and have access to it anywhere and it stays up to date automatically. Also keep a copy on a dedicated thumb drive with at least the password to your cloud drive. Keep it with you or a safe place. This way you only need to update the file to the most current one if you change the cloud password. Make sure to use a strong password for the database, but keep a physical copy written down someplace safe off the computer. Because if you don't remember the password to the database. The is no recovering it.

[@BuddyandCharlie]

Also as a side note: When you set up accounts that ask security questions like "What's Your Mother's Maiden Name?" or "What's Your Favorite Animal?" LIE LIE LIE! These questions are used to verify who you are if you forget a password and try to reset it. Honest answers to these questions can be guessed or found out easily by checking Facebook, other social media or fact pages about you or through simple conversations. Hackers then use this info to reset the password by pretending to be you without needing to crack a hard password. Even amature hackers can "social engineer" you to give up such info, and you would never know. Your best bet is to make up wacky answers or quote something from an obscure movie or song. That way it is near impossible to guess or figure out. What's Your Mother's Maiden Name?: Ans: I live in a blue bicycle What's Your Favorite Animal?: Ans: Alien beavers honk at the sun These are not really passwords so if you can remember or write down 4 or 5 and use them as standard answers to particular questions, it is easy for you to remember later if needed.

[@Andy-fn6tx]

Considering you have been victims I love your bravery and honesty in this video. Thanks for doing this. Sooo helpful

[@MattShaffer]

Amazon actually has a "Amazon Drive" for $60/year for unlimited storage. They now also have a client like Dropbox and Google Drive for automatic synchronization.

[@tVideoUTube]

Now $60 for only 1TB. Crashplan business is $10/month unlimited or $120 year.

[@mainamoses3234]

Great episode guys! As a Database and Web Specialist - and a hobbyist photographer - this is one episode that is reminds us all of the realities of the Web and the fast increasing Cyber Crimes so I really appreciate your taking time to make this episode.

[@WilliamPayneNZ]

While they mentioned a dodgy shipping service, as tony said there are legit ways to buy things from the USA when they won't ship international. Here in New Zealand the postal service setup a depot inside the United States to act as a shipping address for New Zealanders who want to buy from the USA.

[@jimmymifsud1]

That's not fair with a Shipping Service, Australia Post which an Australia Government Owned has a shipping exchange business in the United States .. I use that for a lot of orders

[@DrFearCo]

Oh and 2 factor authentication is something you should have mentioned as well. I would recommend anyone enable that for every account that supports it.

[@ZeldagigafanMatthew]

And if a service doesn't have even a rudimentary 2FA feature, don't use that service at all.

[@dangerpowers123]

About a year ago I switched over to shooting film for many reasons. After watching this I'm now really glad I did as my negatives safe. From being hacked and can be re scanned if required. Although I'll have to make sure my digital images are kept off line. Great channel so so informative.

[@zz2.]

I have a notebook (made of paper) since I was a child and I keep all my password on it. I set different password for almost all my acount (hundreds of pages from 20 years of using the internet). Some of my password is so complicated that people won't be able to enter it correctly even I show to them (probably because my hand writing). And I am happy to see there are people understand the risk of living in this inter-connected world.

[@DJSkippy]

Some interesting info here, some of it I was unaware of and brings some things into perspective. 1 thing to know about offline backups is that information on an offline drive can slowly corrupt over time, which is prevented with modern tech while running. So every 6 months or so you might want to simply power up your offline backups and let them run for a few hours and they should be good.

[@markvermurlen3743]

Thank you so much for making this video. Your experience made me suspicious of a buyer on eBay and after some investigation, I found the buyer was making fraudulent use of both eBay and PayPal accounts. You probably saved me well over a thousand dollars.

[@t.rexxer5007]

Larry and Balki, Perfect strangers. Of Course! Loved that 80's show!

[@adriandobre9366]

Guys you just save my poor kit lens that I was about to ship to England, I followed your recommendation to search for the phone number, not listed as scammer, then I went to google on the address, it was a sheltered housing, then when I searched his name it appeared as listed on scammerlist, thank you guys, he was pretending to pay me via bank transfer the payment in advance, which sounded fishy from beginning, offered more money to convince me to ship the lens outside my country , again fishy... C'mon it's just a kit lens... This world has gone mad. Again Tony and Chelsea, I remembered I saw this video before and I went straight to KZbin to listen again just to make sure, I can't thank you enough because it's not about the gear or money, is about how you feel after you have been robbed and triked, it really hurts your confidence. Love you guys 🤗🤗🤗

[@lomondelectronics3167]

Hey Guys, I recommend that you keep all your photos and valuable files on a separate machine that is never connected to a network or to the internet. Consider the "internet PC" as a "dirty machine". You could even use a Sandbox for internet access. I am not an expert but I am an electronics design engineer. Thanks for all your great stuff on KZbin, Best Wishes, Dave!

[@michaelpickphotography337]

Thanks Tony and Chelsea for your hard work, and sharing of knowledge. You are making a difference for a lot of people.... you two are a gift.

[@tradermic]

I loved this segment. I work in IT and some of this is stuff that EVERYONE needs to know. The only thing I would add is to use a password manager like lastpass.

[@DrFearCo]

My whole home directory consists of symlinks to dropbox folders. Any computer (or device) I log in to I have access to all of my files. They sync automatically and I don't have to think about it. No drag and drop necessary. There are many different ways you can set this up but I've been using Dropbox Pro this way for a year. I am a professional Software Engineer so the system config stuff is easy for me but you could set something up similar without much effort. For example, If I am working on a document at work and I save a file to my documents folder and I want to email that file when I get home. I just open dropbox on my phone, go to my documents folder and send the photo. Simple.

[@branislavpetkovic]

From my point of view solution for Ransomware is very simple: 1. You need an image of your computer system disk - backup device should be offline and you should do this once a week because of frequent windows updates. Keep images at least 2-4 weeks depending on its size. 2. You need to have offline backup which is automatically started by connecting/mounting backup device - for that you should have autostart script on a root directory of a backup device. Do those backups once a week and also keep old backups 2-4 weeks depending on its size. 3. Most of captured photos and videos are not changing in a typical workflow which should be combination of non-destructive editing and creating new version of files during destructive editing. In that kind of workflow existing versions are not changing so you need a software which will monitor directories with your files, calculate checksums for them and report changes of existing files so you can detect illegal access to your files while it is happening. Restore process is very simple: 1.Overwrite your system disk from last image 2.Restore your files from last backup Off course there are much complicated security and backup procedures but this one suites well to average computer users.

[@averykerr3328]

I'm really glad I saw this. It did heighten my paranoia, but for a good reason. Out of several items of photography gear that I tried to sell, most of the buyers were from fraudulent shipping addresses. That was something that I may have overlooked before watching this video, so thank you for saving me a ton of loss. I may be stuck with my gear for awhile but at least I still have it.

[@JohnDoe-fn1me]

Hey guys, why don't you put out a little mini series of show related to how to run a bussines like yours in relation to good security, customer service etc.?

[@bodiejunior]

It sure would be hard to send a package to Yugoslavia.

[@lslx7120]

Filip Reuterberg u could be right...... same for Czechoslovakia

[@rodiaz6652]

The same thing happened to a guitar making company, Kiesel guitars, last year. I believe they had a bunch of $2k to $4k pieces shipped worldwide to uncommon places just to find that the buyers had scammed them using those same methods.

[@RobertNuttmann]

Before I retired two years ago I used to sell machines for making books, printing newspapers, books, and so on. The transactions were usually between 50,000 USD and 1,000,000. In hundreds of transactions over about 15 years I never had any problems. That is because everyone paid by wire transfer or in rare instances cash in person. Wire transfers don't bounce.

[@JAKEM639]

Note to self, never piss off Tony, he will hack me.

[@opsprey3]

Perhaps the best approach is to divide and conquer. First Sunday save to the cloud service A. The second Sunday, an offline drive. Third Sunday cloud service B, last Sunday burn DVDs with data since your last offline hard drive back-up. Keep a log book as to which date ranges are stored where. That way you have a complete back up in the cloud (not all in one service) and one complete backup offline, but not on one type of media or location. This spreads the risk of an entire loss on a single back-up to a partial loss on one of several back-ups. Which could be recovered from either the on-line or off line sources.

[@jorgemoro3102]

Tony/Chelsea. Excellent video. I wanted to regale you with my sad but inspiring story in order to note that sometimes, perseverance pays off as does filing complaints with the ICC. In April 2009 I made a purchase - it was in the low 5-figure amount. Long story short, I did not get what I expected --actually I got nuthin'. I did not contact my local police department because they could do nothing; but I did start making noise with Bank of America - where the money was sent, and where, after I called them, I found out the "middleman" for the individual I was dealing with had an account. After some serious threats, and involving the LAPD, and the FBI they finally closed the account but unfortunately because the bank was so uncooperative in helping me -- even after they told me this guy was a customer -- he moved on just ahead of the authorities. I filed a complaint and kept hard copies of the complaint with the ICC. When I prepared my taxes the following year, I was able to deduct the loss BTW, so it wasn't a total, total loss but it sure hurts the pride - especially when I consider myself a savvy individual. Anyway, almost three years later in late 2011 I receive an envelope from the State department with all my documents in it, and a series of form to complete. It just so happened the two chiefs were caught working out of Romania based on MY complaint, and a few others and were awaiting trial. I giddily completed the necessary forms, and put a letter in there that I would be willing to testify at the trial if need be, and sent them back to the state department in DC via registered mail. About seven months after this I get a letter from the Romanian courts, via our State department that both of these slimeballs were given 15 year sentences in a ROMANIAN Prison. That can't be any fun whatsoever. I was THRILLED to say the least!! So, as I write this, the two jerks who ripped me off are into their 3rd year of a 15 year sentence. And, as I mentioned, I was able to recoup quite a bit by filing a loss on my Federal Income tax return. But DOCUMENTATION is the MOST IMPORTANT item!! To this day I still have the original packets of information that I completed, and copies of the State Department correspondence! Just my two cents. Never, ever give up.

[@BorisEkner]

I live in Guatemala City and buy 99% of my gear from EBay. I pay using my credit card and a shipping address in Miami. Not once have I scammed anyone. Not once have I had any issues regarding payment or deliveries. - Meaning, not everyone is a scammer. I understand your hesitation, taking your experience into consideration. If I ever would sell anything online, I’d make sure I have the payment on hand before shipping it.

[@paulinefollett3099]

The world is a scary place and the online world even more so. Thanks Chelsea and Tony for delivering this important podcast.

[@walletjew]

Hi Tony. my approach for large storage an backup is the following. Using a synology NAS to make an automatic time machine backup. When a computer is in the network on power it starts automatically making a new one (specifically handy for laptops). Then I also use the synology to store all my raw files. I leave a smart copy locally on my mac book, this way I have a decent copy of every photo I took with me all the time, can start editing them and when I need the original I connect to the NAS. Then I let the synology make a back up to Amazon Cloud. you can encrypt this on your synology if you want. This costs me 60 euros a year for an offsite backup solution and a 500 euro investment for a 8TB local storage solution. Everything relatively maintenance free and automatically.

[@OzzyHeadshots]

Holy moly. Who knew!? Sorry that happened to you guys! Thanks for helping us avoid the same situation! You guys rock!!

[@TonyAndChelsea]

Oh hey there! Thanks for watching

[@GregVanGorp]

Google Photos is my favorite app on my phone. With the understanding that it is not storing full resolution images for free (you can pay for that), the free version is a life saver. Moving from phone to phone over the years and knowing that my photos are always backed up is amazing. You can have it synced to automatically on your computer as well. It's free and you have nothing to lose. While you're searching for the best option, give it a shot, but I love it.

[@1414yamaha]

Greg Van Gorp You just have to trust Google :)

[@BrianCollins59]

Hey guys! Good episode! Just thought I'd tell you about my online backup service. I use Back Blaze and, although I haven't had to do a recovery, so far I'm happy with the automatic backup service.

[@wcoyote2276]

Tony, I have been using MyCloud by westerndigital. I can either place that drive local or remote and access it whenever I wish. The drive also has a USB port on the back which allows me to back up to another external drive.

[@andrews458]

I do cloud backups with Arq, it's great - you can choose whatever cloud service you want, track changes, everything.

[@mickmckean7378]

I'm very happy with Crashplan as an backup solution Tony. Backup to cloud, local disk, portable disk, NAS/network mapped drive, other computer . Multiple backup set configurations and scheduling, encryption, unlimited storage, data de-duplication. They have an option to "seed" a backup or restore to speed up the initial process, where they ship you a drive to copy your archive onto (initial backup) or a drive with your archive on (DR restore). All this for $50/year. And no, I don't have any relationship with Crashplan (apart from paying them each year to host my backup solution).

[@compositecapitulum]

Hyperdrive Colorspace UDMA 2 - I have found this device really handy and useful. It uses DMA - UDP kind of protocol to quickly transfer data from your memory cards to a HDD installed in the device. It is portable and really handy in the field. I have experienced speeds of 266MBps speeds (2GB/min) with the device and it's pretty darn great.

[@robertgrenader858]

I use Dropbox, and initially wanted to be able to access my photographs on whatever platform I was using. I relocated my entire photo directory to the Dropbox folder and had Lightroom rebuild a catalog. So backup is real time and hands off.

[@spyrosbotsolis2125]

I can share a story too. I live in greece and I hear these things happen here too. A friend of mine bought a DELL laptop from US through amazon. a month after he was using it, the damn thing broke. he contacted DELL in greece and gave them the serial number. they told him that the laptop does not exist in their data base or any world wide DELL database. then he contacted amazon. they asked him to ship the laptop to them, they reimbursed him the money he paid for the laptop as well as the cost of shipping. things in US I guess work in a more honest-efficient way than in any other place on earth.

[@dougbrimeyer5715]

Another way to backup your pictures safely is to do like I do. I took an old laptop and removed the Ethernet card and the WiFi card, formatted the hard drive and I use a live CD of Ubuntu Linux. Since I formatted the 500 gig hard drive I have all that room to store pictures until I can connect an external hard drive. The laptop has a card reader slot to read the memory cards. Doing it this way I have backed up my pictures on multiple media formats before it ever see a computer that is connected to the internet. Using Ubuntu Linux Live CD is like booting up a brand new, undamaged computer every time you boot up your computer since the CD can't be changed if you use a CD-R type CD. A live CD can even be run on a computer without a hard drive. Everybody wants the latest and greatest in computers and OS's. Just about everybody I know has an old computer laying around that physically works great that will end up at a recycling company or in a landfill, why not format the hard drive and install an operating system, like Ubuntu, that isn't as common as windows that the hackers don't seem interested in wasting their time hacking. If you never connect that computer to the internet then there is no way a hacker can hack your computer or encrypt your files. Just dedicate that computer to making backups of your photos before you take a chance putting them online. If you don't have an old computer you can buy one off of Ebay really cheap, usually under $50. Hacker can't hack a computer they can't connect to.

[@aalderinkg]

What i used for a long time, was to put my nas not in raid, but in just as seperate disks. Use rsnapshot on the nas (if the nas doesn't support that you can do that with a seperate computer, preferably not connected to the internet (which is the only computer with write access to the backup disk)) rsnapshots backups to the backup disk. This backup disk is only presented to other computers (except the backup computer) as read-only. That way the chances of the backup getting ransomed is really small. You can then still use some sort of replication software on your normal computer to sync the data from the read-only disk to a location off-site. I found this a great automated system, which limits the risks greatly. I do admit that this sollution is very techy.

[@iozzyi]

As for the ransoms, leave that to the big companies to pay out! If you're using Windows, store everything important in your OneDrive folder. It's convenient because you can access it anywhere online from any device, but also it's a lot safer to use the cloud than trying to manage and backup your own data centre.

[@gruettner420]

I order ecig equipment online and some places require you to verify your identity by sending images of your id and signature. They verify your age and you are good. I know it's another step, but keeps your more protected.

[@portblock]

That's called offline storage not air gap, air gap would be physically separate systems, my studio is completely offline physically separate network and not part of the rest of the office network.

[@BillLanam]

Google Photos does backup RAW now. Also, it's an "echo" process that doesn't process deletes. Great for redundancy

[@mikecallaghan6377]

Hi Guys the most important things about backups is a system to confirm that they have successfully completed, and you must periodically test those backups can actually be restored corrrectly.

[@sunset986S]

Almost fell out of my chair laughing at 31:09...Chelsea should go on the road doing stand up comedy...lol

[@doodsanddudes]

Tony and Chelsea have you tried cloudberry? You can choose your depository of choice and it works great. We use amazon but there are like 50 to choose from. You can encrypt or just do a file copy or image. Also has access to glacier services

[@TrevorVanDerLinden]

Challenge with many cloud services is they sync what is on your disk. So when the files are encrypted on your disk, it will also do this to the cloud versions. So need to find a cloud service that has snapshots and you can revert back to the snapshot.

[@chawlakunal86]

Hi Tony, I do use google photos for auto backup. I also use western digital' MyCloud for the drag and drop service which also requires a password. Also regarding auto backup, you could have Dropbox client and sync a particular folder.

[@aidaberber2590]

I'm amazed by all the ways people can scam you when selling used gear or hack your computer for your photos. Thanks for an eye opener podcast. Scary, though.

[@DyslexicMensan]

So sorry for you both! Shocking! Chelsea is clearly so so angry about it. Had ransom wear attack at my office - lost a lot of old files but thankfully secure backups of all the current stuff. That was despite various restrictions and up to date protection software - one slip by an employee supporting a genuine customer who themselves had been infected and...!!! Anyhow, don't let these people grind you down - protect as best you can, try to stay positive, keep up the great work and your genuine followers will always support you. Thanks for the warning!

[@deeno6067]

Crashplan is pretty cool. I believe they have an option where you can send them a hard drive, and they back it up for you that way. If I'm not mistaken, you pay the fee, they send you whatever size you need, then you send it back for them to backup. Their backup speed online is sooooo slow. But I think every one of the services are like that. This one seems to be the most full of features though.

[@robertsteich7362]

The US Post Office is now setting up as a physical address. You know how some companies say "no PO Box". Well the US postal service is now giving out their physical address as an accepting address. Basically for the post office here in Ledyard, CT 764 Colonel Ledyard Highway. Then give your PO box number as an "apartment" number. And you're all set. The shipper wouldn't know it's being shipped to a PO Box. This is actually how some people are getting car loans. They give the address of a post office at the bank. Pay a couple months then when they stop. The bank goes to repo, only to find out it's not a house but a post office.

[@Belas_Photography]

Okay, at 31:15 Chelsea had me in a fit of laughter about the customer satisfaction from ransomwear providers. Good show.

[@Kamel419]

Tony, it is really cool to know your past - never knew that about you! Regarding my backup procedures, I have a RAID network attached storage computer running NAS4Free that is only accessible from within my local network, and I do not mount it as a network drive. This makes it so that any potential ransomware couldn't encrypt my NAS. I also have different user accounts on the NAS for the users, so if for example my wife's stuff got encrypted, it wont also impact me. If I were smart, I would have another storage volume on my NAS not accessible over the network that I would keep backups on, but I don't. I use this method because I don't trust any cloud hosting provider - I don't want my data to be in their hands. Also, counter-intuitively, I haven't used any anti-virus on my PC for years. I think they give you a false sense of security, and have a larger impact to your system's overall performance than any other software. I also typically use Linux when I can (or mac) just to make it so that the likelihood of a virus actually being able to carry out its payload less likely. I am writing this comment from a PC using Linux Mint.

[@CarbonXtreme]

Just build a cheap offline PC with massive storage for all your important files and add encryption to the files

[@Yaz]

Also FYI, you can buy a USB key on Amazon that will bypass any Windows password so don't think because you set that up that your data is safe from theft

[@aaronleung7902]

For storing photos, i have a raid 5 external storage. I have a 2nd external raid 5 storage that backs up the first, and I only switch it on when I run the back up program. I have a reminder every month to remind me. After it's backed up, I switch the 2nd external drive off until it's needed again. On top of this, I have backblaze to backup my photos to the cloud, but my biggest problem is uploading them as the internet speeds in australia are very slow. My mac also has time machine installed where it backs up my computer on a regular basis. Having worked in IT for almost 20 years, it comes in handy looking after your own data.

[@spinb]

Was the previous upload of this video hacked??

[@TacoNASCAR]

Audio wasn't synced up

[@iozzyi]

Never personally hand deliver your items! Use a recorded, signed for and insured parcel service! The buyer pays for the postage anyway, and it insures your package if it gets lost.

[@CoffeeD_1]

i use google photos to upload my jpegs. you can change the settings to save the full resolution jpegs. the storage is not unlimited, but you can upgrade the storage. I never save my raw files after I edit them. all the changes that require a lot of the raw data have been made and colour changes and such can be done with jpegs

[@Nightsbringer1]

I don't know if you guys have it in the USA but in the UK we have a site called Gumtree. It is mainly for cash selling etc. You aren't protected from buying stolen goods etc but there is a bit of peace of mind which comes from having to meet the seller somewhere public. For example, I bought a new Tamron zoom lens and met the bloke in Covent Garden. Very public and a bit safer as someone isn't going to try and mug you in broad daylight in the middle of a busy cafe

[@RspbyLmn]

Okay...now I am totally overwhelmed and terrified. Thanks for the info.

[@ByronMaddox]

Carbonite has worked great for me over the years. Basic plan is just $60 per year and has unlimited storage for one computer. For $150 you get unlimited for one computer plus an external drive. As a bonus with the $150 they will send you a recovery drive so you don't have to download a TB of data. Their software runs in the background and you can set it to auto backup anything you want saved. My raw files are sometimes backed up before I have them edited.

[@JimGriffin]

Backup recommendation: Carbonite. Password management: LastPass Also, you can set Google Drive to automatically sync your files...which not only backs it up to the cloud, but you can access your files from other devices if you want.

[@TheOnceAndFutureDoug]

Also, because Chelsea and Tony didn't name names, Get 1Password for your passwords. It's secure, it's fast, it has an impeccable track record and is very well respected in the tech and security communities for it's use of best practices. If that's not your jam there's LastPass. I use both (work for one, personal for the other) and I'm a bigger fan of 1Password. But either way use a password manager.

[@ghffrsfygdhfjkjiysdz]

14:15 "I do not want to anger a hacker..." Chelsea, trust me, any hacker that is good enough to hack into your computer without you doing something stupid , like running an exe file from someone you do not know etc, is not interested in hacking you.

[@Ahmed4th]

I use shipments forwarders all the time because either I can't find some of the goods I need locally or they are cheaper to buy them from overseas. It's said that people would use these services to steal from other people.

[@pantag2]

I am sure with the super slow internet connection speeds in Waterford, it would probably take a couple years to do a cloud backup of your photos!

[@JoachimDyndale]

I have been a happy customer of SpiderOak for a few years now for secure off-site backup. The connection for uploading files is a bit slower than I'd like, but definitely usable; it's been a while since I looked at the actual numbers, but I seem to remember the upload speed being 2-5 Mbits/sec. Also, I can't recommend LastPass highly enough; really excellent password manager. NEVER let Chrome or other browsers save your passwords for you, as they store them in plain text (or at least easily viewable by anyone with access to the computer). Turning on two-factor authentication wherever possible is also a must.

[@metals2546]

I had a similar experience but it was through eBay. I used paypal, (and luckily used a credit card) and just as you both indicated, they could not care about the fraud. I did not even file a claim through Paypal, I went directly to my credit card company. I also reported it to the police, and contrary to your experience (although this occurred in Canada, not Russia). I received the refund within 10 days, but then had to wait 45 days for it to be accessible. The police also caught the thief. Sorry to hear your that your experience did not end well.

[@braedendickson4026]

what camera would you say is the best overall bang for your buck a canon 80d, nikon 610d, or a nikon 750d and what lens would you recommend for that camera.

[@zvxcvxcz]

Continuous automated monitoring can be a big help was well, if your file checksums or file sizes start failing, you've got an early warning. Some online backup services allow you to initially send physical disks to them in order to cut out the initial upload time. On Linux, cron + Rsync over key based ssh is the perfect system. Automated, encrypted, and efficient (sends only deltas). Can be setup on Windows and Mac as well with some work. And BSD, etc..

[@LunatiqueRob]

@Tony/Chelsea - I recommend CrashPlan for cloud backup. They encrypt everything, and has no storage limit, and has comprehensive automatic settings you can set for how often to backup, what to backup, how many versions to keep with a specific time period, as well as include additional local network or remote network backup options (for example to your friends/family's computers).

[@chengong388]

A tip for passwords that's better than using one password for all websites but more convenient than password manager. Use a few different tiers of passwords, where the highest most secure password you only use for the most secure websites like banks and large corporation, and use some other simpler passwords for random forums.

[@Joostered]

If you're serious about security you keep your workstation offline. Use a cheap laptop or tablet for net access and you're good. Oh and tell adobe to shove that cloud crap.

[@ckwong1013]

try amazon photos again. they now have a good windows backup software that will backup/sync a drive or folder from your computer automatically. You can set it to exclude videos if you have prime and its free or you can pay more to back up all your files.

[@jacobl6572]

Thanks guys for the info, I have pair of large storage devices I rotate keeping one off line in another place. They automatically update and stores my files. I just have to remember to unplug the one and plug in the other on a regular basis.

[@DrFearCo]

A complex password with HIGH entropy and is easy to remember can be a phrase consisting of 4 or 5 random words. Your password could be Green Tree So Tall or Red Car Zoom Fast. These are things I can see out my window, they are easy to remember and have high entropy. You should also have unique passwords for EVERY site and you should use a password manager such as 1Password. If your Playstation account gets hacked for the 10th time, you don't need to reset your password on EVERY. SINGLE. SITE! 1Password is THE BEST. Been using it for years

[@HaouasLeDocteur]

Dr Fear & Co. "Green Tree so Tall" is a terrible password with next to 0 entropy. Passphrases are the way to go no doubt, but your sentence has to make no sense at all and have no valid syntax. It should be truly random words.

[@DrFearCo]

Dhul Qarnayn 4 random words would be better and maybe my example wasn't great. But you can sacrifice some entropy for memorability. The odds of guessing those 4 words are still very low. Not zero.

[@DLCSpider]

Dhul Qarnayn But "Green T!?ree so_täll*" would be a very safe pw and still easy to remember.

[@DrFearCo]

DLC Spider a lot of sites don't support Unicode characters as a password. We can do the math here in the comments section but either way both passwords are better than "password1"

[@DrFearCo]

DLC Spider here is an interesting comic. Not saying it's be all and end all and I am not a security researcher but this is still useful info. xkcd.com/936/

[@walteraddeson2444]

What symbol should we put inside the matrix to indicate that a given backup method is effective against a given threat? How about a red X? Did you say, "A green check mark"? No, I said, "A red X!" Just checking.

My experience with PayPal on the merchant side is, that no matter what you do, they will always process a chargeback. It's especially a problem with services and electronic goods because you won't have a shipping address to compare with.

[@FrankNeulichedl]

I use Amazon Cloud Drive as Backup - the unlimited plan is 60$ - and is really 100TB, but more than enough IMO. Since the sync client is not really a backup I use a software called ARQ (available for Mac and PC) - it makes real backups and you can store to multiple locations (HDDs, Offline, Online). Backups are encrypted and the file format is open source - so you can restore it without the software if they ever fail.

[@CrimsonFlame567]

My school district was hit by ransomware (some teacher opened a bad email) once but thankfully our IT department had back ups for the schools' server but for 2-3 days after the attack barely any work was done for classes because the desktops are wiped everyday so everyone depends on the servers.

[@TheTechnoPilot]

For photo backups, hands down Backblaze! It can be fully encrypted so that they can't even access your photos/files and has no limit for storage per computer (internal/attached external drives) for only $5 a month. Also so far, it has consistently been able to keep up with my very fast upload connection to upload multiple terabytes even during the 15 day trial period. Definitely check them out!

[@God-yb2cg]

It's very common to ship to a different address and name than the billing one, many many people ship the items to their workplace or to a friend/family member who's at home all the time so they don't have to drive to the post office to get the goods.

[@okaro6595]

You should simply store the images on the cloud folder so you do not need to do anything extra to copy them to there. That way they also will be uploaded every day instead of in large chunks weekly.