Hackers Stole our Camera! Learn to Protect your Gear & Photos
ฝัง
- เผยแพร่เมื่อ 6 ม.ค. 2025
- We'll teach you how to back up your photos, too. Try The Great Courses Plus now! ow.ly/qiMD308jLwC
For more, SUBSCRIBE and like Northrup...
Buy the #1 book with 14+ HOURS of video: amzn.to/1dCRJWA
Worldwide use 10% off coupon 'TH-cam': sdp.io/sdpbook
Get my Photography Buying Guide: amzn.to/163yztj
Worldwide use 10% off coupon 'TH-cam': sdp.io/buybg
OR, search for "Tony Northrup" in your Kindle, iBooks, Google Play, or Nook stores. All versions include 10+ hours of video, free lifetime updates, and free support.
Questions? Add a comment and I'll reply.
Our camera recommendations:
STARTER CAMERAS:
Basic Starter Camera ($280 used at Amazon): Canon T3 help.tc/t3
Better Starter Camera ($500 at Amazon): Nikon D5300 help.tc/d5300
Better Travel Camera ($500 at Amazon): Olympus OM-D E-M10 Mark II help.tc/em10ii
LANDSCAPE CAMERAS:
Good ($550 at Amazon): Sony a6000 help.tc/a6000
Better ($1,400) at Amazon: Nikon D5500 help.tc/D5500 & Sigma 18-35mm f/1.8 help.tc/s35
Best ($3,150) at Amazon: Pentax K-1 help.tc/K1 & Pentax 24-70 f/2.8 help.tc/p24
PORTRAIT CAMERAS:
Beginner ($950 at Amazon): Canon T6i help.tc/t6i & Canon 50mm f/1.8 help.tc/c50
Better ($3,000 at Amazon): Nikon D610 help.tc/d610 & Tamron 70-200 f/2.8 help.tc/t200
Best ($5,300) at Amazon: Nikon D810 help.tc/d810 & Nikon 70-200 f/2.8E help.tc/n200e
WILDLIFE CAMERAS:
Starter ($1,100 at Amazon): Canon 7D help.tc/7D & Canon 400mm f/5.6 help.tc/c400
Great ($3,200 at Amazon): Nikon D500 help.tc/d500 & Nikon 200-500 f/5.6 help.tc/n500
VIDEO CAMERAS:
Beginner ($500 at Amazon): Panasonic G7 help.tc/g7 & Panasonic 14-42mm help.tc/p42
Better ($1,400 at Amazon): Panasonic GH4 amzn.to/2p5dAmD & Panasonic 14-140 f/3.5-5.6 help.tc/p140
Best ($4,300 at Amazon): Panasonic GH5 help.tc/gh5 & Metabones Speed Booster XL help.tc/mbxl & Sigma 18-35 f/1.8 help.tc/s35 & Sigma 50-100 f/1.8 help.tc/s100
DRONES:
Beginner ($400 at Amazon): DJI Phantom 3 help.tc/p3
Travel ($1,000 at Amazon): DJI Mavic Pro help.tc/Mavic
Better Image Quality ($1,500 at Amazon): DJI Phantom 4 Pro help.tc/p4p
📚 Buy Our Books on Amazon! 📚
📕Stunning Digital Photography: help.tc/s
📘Lightroom 6 Book: help.tc/l
📙Photoshop Book: help.tc/p
📗Buying Guide: help.tc/b
Since posting this video we've learned that you can report this type of fraud to your local FBI office or the Internet Crime Complaint Center.
Several people have told us the FBI recovered their losses and started investigations into fraud schemes that have ended in prison sentences.
Tony & Chelsea Northrup I've reported someone from Facebook trying to route money from "Nigeria" to the FBI internet fraud and they were quickly deleted.
They can take a onerous occasion and make it into something interesting and educational.
Oh my gosh, this happened to me!! I put my gear on E-Bay and someone said they were interested in buying all the gear, which I had put in the description that I was selling all the gear as one unit. He asked me to send him pictures of the top and bottom . I sent it to him using the "REPLY" option on the email. This email came through E-Bay. So I sent him the pictures, he said he would like to buy all my gear. It cost $330.00 to ship it to NYC. I researched the the name of the person on his E-Bay account and he had great ratings. His account he had since 2008. So I figured he was ok. Before I shipped it I got a notice from EBay and Paypal that the money was in my account. So I sent the gear, went to Paypal to get my money and it was NEVER there. The EBay and PayPal notice was a Forgery. This guy also hacked into the EBay member's account so when I looked it appeared legit. I contacted EBay and they would not do anything because I sent him an email to his personal email, which was fake also.I thought I was talking to him through EBAy.
So, the takeaway here is if they are requesting you to send it to anyone other than there own name, and residence. Don't do it!!!
I am out all my gear, and gear worth $10,000. My heart is broken. Thankfully I am not a professional photograph and don't make my living from my gear. I am sorry this happened to you. Sometimes, people suck.
I have a background in software engineering but not cyber security. So a lot of this stuff is still new to me. Tony is such a dark horse.
Spotted 'hacker' with hand-held scanner on a crowded street in my neighborhood, working the crowds: wallets in pockets, purses on strollers etc. I followed him with my trusty DSLR in video mode, taking a couple of clips sufficient to show his actions with the scanner & identify his face, then I dropped in to a local police station hoping for some interest. "Your crazy, it's impossible" the police officer at the desk admonished me when I told my tale. She refused to open a file on my complaint even when I explained that the video clearly showed the perp's face as he did his deed ... thinking it might be useful for any local beat cops to keep a lookout for him in action. The desk cop insisted that I was wrong with my information, that this sort of illegal scanning took place ony at check-out stations in stores etc.
I persisted and asked her to at least look at the memory card. "We can't do that" she exclaimed.
I said "Why not?" She replied, "You might place a virus on our computer!"
David Robertson Great story. I can't believe the cop didn't even file your complaint. I find many people and companies lack understanding that scam artists/hackers are clever individuals and aren't the stereotypes seen on tv. Their attitude toward security is either considering it an obstacle or that it's somebody else's responsibility. Interesting that local police are usually ill equipped to dealing with cyber crimes but the one case where they could have done something (like apprehend the guy in your story), they failed to even act.
6:25 Yugoslavia? Really? It's 2017.
Yugoslavia in 2k17 LUL
Dragoljub Radovanović They even dont know the names of the countries having bombed down any more, because these are that much.
... and wonder why they are hacked? :)
Tamas Varga 😅😅😅👍
Maybe back to the Future....1991 :) :)
The thing I admire most about you guys is how you handle negative situations and criticism. You almost always take the high road and don't seem to let anything bother you too much. It's a great example of the right way to do things. I'm sorry about your losses. That's not pocket change.
After being stolen by someone living in the USSR, Tony will never send again gear to countries like Czechoslovakia, East Germany or to Austria-Hungary Empire! ;D
Teodore Hatzikostas LOL and Yugoslavia anyway
No mention of the Ottoman Empire? HERESY!
Teodore Hatzikostas Atlantis is also on the no-no list.
East Germany... :)
childish humor
Hacked my way to the third comment. Being first is too suspicious
I lost $1300 in 2005 selling computers online. Received two counterfeit postal money orders for $1700 only to have the bank change it back to my account about 3 weeks later. Then I decided to self finance computers and sell them in a retail store, on credit; bad idea. Literally gave them away for a 10% down payment. Dateline NBC did a wonderful article where they tracked merchandise stolen with fake money. It was pretty much just as the Northrups described - they always use mules to re-ship overseas.
I've got a bunch of camera gear on eBay right now.. Thanks for multiplying my stress factor for the next week!! In all seriousness, this was all great advice. So cool to hear you used to be in the cybersecurity field! I'm currently finishing up some education to go into that. Why did you get out??
Great episode guys! As a Database and Web Specialist - and a hobbyist photographer - this is one episode that is reminds us all of the realities of the Web and the fast increasing Cyber Crimes so I really appreciate your taking time to make this episode.
For cloud backups, I've used a Synology NAS for years an I love it. I also use Dropbox, Google Drive, etc, but the storage/speed limitations, and cost, keep me from using them for anything serious. The 2-bay Synology drives are relatively inexpensive now, and allow you to have multi-terabytes of backup storage. The built-in Cloud Station app lets you do automated cloud backups from your PC's just like any of the online services. For offsite protection in case of a fire or theft, ask a friend or family member if you can keep it at their house. Or buy a second one and use the built-in Cloud Station ShareSync feature to replicate your cloud backup to another offsite NAS. The Synology Quickconnect feature makes for easy connection across different networks, no router firewall setup, etc..
Great video. Reminds me to stay vigilant.
Great comment! Synology is *exactly* what I use, and I love it, too! I have two 4TB drives in both NAS devices. One is connected online, the other is not. I'm also going to get another NAS to keep off-site.
About a year ago I switched over to shooting film for many reasons. After watching this I'm now really glad I did as my negatives safe. From being hacked and can be re scanned if required. Although I'll have to make sure my digital images are kept off line. Great channel so so informative.
Tony and Chelsea have you tried cloudberry? You can choose your depository of choice and it works great. We use amazon but there are like 50 to choose from. You can encrypt or just do a file copy or image. Also has access to glacier services
"Notice of Recognition of Extraordinary Loss,"
hahahahahahahaha
Omesh Singh Best comment of the year!
Omesh Singh nice
Amazon USA, ship parcels to the UKA which imo can be tracked from Europe by purchasers eg for delivery time.
I don't get it.
Crashplan has good versioning (unlimited versions), unlimited storage, and multiple computer support for "family" use, but any "live" backup sets use up a fair bit of memory. I've been using it for a few years now, and it's worked well (though recovery/restore is a bit cumbersome, any deleted files can be recovered which is great and works well for 'cold storage').
If you're worried about upload speed just ship the backup service a hard drive with all your stuff on it to get a starting point set so it can simply track the changes (same goes for restore).
I also have an IT background, so I found this video very interesting. :)
Random passwords aren't actually much more secure. I read somewhere that using a set of unrelated strings (15+ chars) is actually more secure (because you won't need to write it down).
Another vote for Crashplan... it is a little more cumbersome to use than some other interfaces, but it works really well and can do both cloud and peer to peer backups between friends pc's etc. The peer-to-peer backup is free with the application you only pay for cloud backup storage. Been using it for years and it works very well. And it keeps many versions of every file (the number and frequency of versions is configurable) so you can restore a copy from yesterday, last week, or last year.
+1 Crashplan has work well for me for years. Best feature is using using a local backup server(s) in addition to the cloud. Local server is fast for the majority of tasks, and the cloud is your offsite if your house burns down.
Considering you have been victims I love your bravery and honesty in this video. Thanks for doing this. Sooo helpful
Guys you just save my poor kit lens that I was about to ship to England, I followed your recommendation to search for the phone number, not listed as scammer, then I went to google on the address, it was a sheltered housing, then when I searched his name it appeared as listed on scammerlist, thank you guys, he was pretending to pay me via bank transfer the payment in advance, which sounded fishy from beginning, offered more money to convince me to ship the lens outside my country , again fishy... C'mon it's just a kit lens... This world has gone mad. Again Tony and Chelsea, I remembered I saw this video before and I went straight to TH-cam to listen again just to make sure, I can't thank you enough because it's not about the gear or money, is about how you feel after you have been robbed and triked, it really hurts your confidence. Love you guys 🤗🤗🤗
I don't suggest keeping passwords stored in the browser. Especially Chrome.
Chrome allows you to set up an account as the first feature in settings so that you can sign in on another computer and have access to all passwords, history, bookmarks and or settings etc.
Someone getting access to your computer can allow them to set up an account if you haven't used this feature. Few people do. (and how often do you look to see if someone has.)
Now they have access to everything. Your bookmarks and history leads them to all your accounts, and even updates if you change passwords or setup new accounts.
Use a password storage app to store passwords.
Keepass is a really good one. It is free, open source and updated often.
The passwords are kept in a single file encrypted database, but can also have many different database files as well.
You can put the database file in a cloud storage like google or dropbox if it's linked to your computer, and have access to it anywhere and it stays up to date automatically.
Also keep a copy on a dedicated thumb drive with at least the password to your cloud drive.
Keep it with you or a safe place. This way you only need to update the file to the most current one if you change the cloud password.
Make sure to use a strong password for the database, but keep a physical copy written down someplace safe off the computer. Because if you don't remember the password to the database. The is no recovering it.
Also as a side note:
When you set up accounts that ask security questions like
"What's Your Mother's Maiden Name?" or "What's Your Favorite Animal?"
LIE LIE LIE!
These questions are used to verify who you are if you forget a password and try to reset it.
Honest answers to these questions can be guessed or found out easily by checking Facebook, other social media or fact pages about you or through simple conversations.
Hackers then use this info to reset the password by pretending to be you without needing to crack a hard password.
Even amature hackers can "social engineer" you to give up such info, and you would never know.
Your best bet is to make up wacky answers or quote something from an obscure movie or song. That way it is near impossible to guess or figure out.
What's Your Mother's Maiden Name?: Ans: I live in a blue bicycle
What's Your Favorite Animal?: Ans: Alien beavers honk at the sun
These are not really passwords so if you can remember or write down 4 or 5 and use them as standard answers to particular questions, it is easy for you to remember later if needed.
Tony, I have been using MyCloud by westerndigital. I can either place that drive local or remote and access it whenever I wish. The drive also has a USB port on the back which allows me to back up to another external drive.
Thanks Tony and Chelsea for your hard work, and sharing of knowledge. You are making a difference for a lot of people.... you two are a gift.
That's not fair with a Shipping Service, Australia Post which an Australia Government Owned has a shipping exchange business in the United States .. I use that for a lot of orders
Hey Guys, I recommend that you keep all your photos and valuable files on a separate machine that is never connected to a network or to the internet. Consider the "internet PC" as a "dirty machine". You could even use a Sandbox for internet access. I am not an expert but I am an electronics design engineer. Thanks for all your great stuff on TH-cam, Best Wishes, Dave!
I'm really glad I saw this. It did heighten my paranoia, but for a good reason. Out of several items of photography gear that I tried to sell, most of the buyers were from fraudulent shipping addresses. That was something that I may have overlooked before watching this video, so thank you for saving me a ton of loss. I may be stuck with my gear for awhile but at least I still have it.
Tony/Chelsea. Excellent video. I wanted to regale you with my sad but inspiring story in order to note that sometimes, perseverance pays off as does filing complaints with the ICC. In April 2009 I made a purchase - it was in the low 5-figure amount. Long story short, I did not get what I expected --actually I got nuthin'. I did not contact my local police department because they could do nothing; but I did start making noise with Bank of America - where the money was sent, and where, after I called them, I found out the "middleman" for the individual I was dealing with had an account. After some serious threats, and involving the LAPD, and the FBI they finally closed the account but unfortunately because the bank was so uncooperative in helping me -- even after they told me this guy was a customer -- he moved on just ahead of the authorities. I filed a complaint and kept hard copies of the complaint with the ICC. When I prepared my taxes the following year, I was able to deduct the loss BTW, so it wasn't a total, total loss but it sure hurts the pride - especially when I consider myself a savvy individual. Anyway, almost three years later in late 2011 I receive an envelope from the State department with all my documents in it, and a series of form to complete. It just so happened the two chiefs were caught working out of Romania based on MY complaint, and a few others and were awaiting trial. I giddily completed the necessary forms, and put a letter in there that I would be willing to testify at the trial if need be, and sent them back to the state department in DC via registered mail. About seven months after this I get a letter from the Romanian courts, via our State department that both of these slimeballs were given 15 year sentences in a ROMANIAN Prison. That can't be any fun whatsoever. I was THRILLED to say the least!! So, as I write this, the two jerks who ripped me off are into their 3rd year of a 15 year sentence. And, as I mentioned, I was able to recoup quite a bit by filing a loss on my Federal Income tax return. But DOCUMENTATION is the MOST IMPORTANT item!! To this day I still have the original packets of information that I completed, and copies of the State Department correspondence! Just my two cents. Never, ever give up.
I have a notebook (made of paper) since I was a child and I keep all my password on it. I set different password for almost all my acount (hundreds of pages from 20 years of using the internet). Some of my password is so complicated that people won't be able to enter it correctly even I show to them (probably because my hand writing). And I am happy to see there are people understand the risk of living in this inter-connected world.
Hi Tony. my approach for large storage an backup is the following. Using a synology NAS to make an automatic time machine backup. When a computer is in the network on power it starts automatically making a new one (specifically handy for laptops). Then I also use the synology to store all my raw files. I leave a smart copy locally on my mac book, this way I have a decent copy of every photo I took with me all the time, can start editing them and when I need the original I connect to the NAS. Then I let the synology make a back up to Amazon Cloud. you can encrypt this on your synology if you want. This costs me 60 euros a year for an offsite backup solution and a 500 euro investment for a 8TB local storage solution. Everything relatively maintenance free and automatically.
Amazon actually has a "Amazon Drive" for $60/year for unlimited storage. They now also have a client like Dropbox and Google Drive for automatic synchronization.
Now $60 for only 1TB. Crashplan business is $10/month unlimited or $120 year.
My school district was hit by ransomware (some teacher opened a bad email) once but thankfully our IT department had back ups for the schools' server but for 2-3 days after the attack barely any work was done for classes because the desktops are wiped everyday so everyone depends on the servers.
I have a second main pc, it's linked to the external HDD's which are filled by the main PC. The second PC is not linked to the main externally linked PC.
Then I have two laptops which can be used in case either or both of the other pc's go down.
Currently creating 600-800 GB of Data a month, so need a secure storage, I can then use those files & transfer what I need on 1-8 TB copy of the backup to keep the backup original and nothing coming from the main system & unlikely to affect all drives, but still not 100% if something gets through.
Hope this helps.
While they mentioned a dodgy shipping service, as tony said there are legit ways to buy things from the USA when they won't ship international.
Here in New Zealand the postal service setup a depot inside the United States to act as a shipping address for New Zealanders who want to buy from the USA.
Some interesting info here, some of it I was unaware of and brings some things into perspective. 1 thing to know about offline backups is that information on an offline drive can slowly corrupt over time, which is prevented with modern tech while running. So every 6 months or so you might want to simply power up your offline backups and let them run for a few hours and they should be good.
Hi Tony, I do use google photos for auto backup. I also use western digital' MyCloud for the drag and drop service which also requires a password. Also regarding auto backup, you could have Dropbox client and sync a particular folder.
7/29/17 @ 11:36 Hrs.
Tony & Chelsea. Can you PLEASE tell us (OR ME) the URL of the store that we can buy your used and/or reviewed gear at? The reason I ask is because about three weeks ago my 4X5 Speed Graphic (that my father gave me on my 10th birthday,) My Nikon F2 with all 5 lenses, my RB67 and my old Bolex H16 movie camera were all stolen from me public storage (Yes I am an old time film guy) and my wife says it's time I go digital.
Thank you so much for making this video. Your experience made me suspicious of a buyer on eBay and after some investigation, I found the buyer was making fraudulent use of both eBay and PayPal accounts. You probably saved me well over a thousand dollars.
Oh and 2 factor authentication is something you should have mentioned as well. I would recommend anyone enable that for every account that supports it.
And if a service doesn't have even a rudimentary 2FA feature, don't use that service at all.
Hey guys, why don't you put out a little mini series of show related to how to run a bussines like yours in relation to good security, customer service etc.?
Where do you list your used gear? I am looking for a 70-200mm f/2.8 for a K mount.
Say, for backing up to OneDrive, the folders are still on your computer (that's the way by default), so does that mean the ransom-ware encryption affect those, and then those encrypted files will always follow no matter where in the cloud?
Backblaze. I have 12 TB. Very slow to get started but it's been good. I've used other online backups and they break when you have too much data. Crashplan had this issue at 2tb for example despite a lot of useless customer support.
Hey guys! Good episode! Just thought I'd tell you about my online backup service. I use Back Blaze and, although I haven't had to do a recovery, so far I'm happy with the automatic backup service.
For storing photos, i have a raid 5 external storage. I have a 2nd external raid 5 storage that backs up the first, and I only switch it on when I run the back up program. I have a reminder every month to remind me. After it's backed up, I switch the 2nd external drive off until it's needed again. On top of this, I have backblaze to backup my photos to the cloud, but my biggest problem is uploading them as the internet speeds in australia are very slow. My mac also has time machine installed where it backs up my computer on a regular basis. Having worked in IT for almost 20 years, it comes in handy looking after your own data.
14:15 "I do not want to anger a hacker..." Chelsea, trust me, any hacker that is good enough to hack into your computer without you doing something stupid , like running an exe file from someone you do not know etc, is not interested in hacking you.
My whole home directory consists of symlinks to dropbox folders. Any computer (or device) I log in to I have access to all of my files. They sync automatically and I don't have to think about it. No drag and drop necessary. There are many different ways you can set this up but I've been using Dropbox Pro this way for a year. I am a professional Software Engineer so the system config stuff is easy for me but you could set something up similar without much effort.
For example, If I am working on a document at work and I save a file to my documents folder and I want to email that file when I get home. I just open dropbox on my phone, go to my documents folder and send the photo. Simple.
Thanks guys for the info, I have pair of large storage devices I rotate keeping one off line in another place. They automatically update and stores my files. I just have to remember to unplug the one and plug in the other on a regular basis.
So sorry for you both! Shocking! Chelsea is clearly so so angry about it. Had ransom wear attack at my office - lost a lot of old files but thankfully secure backups of all the current stuff. That was despite various restrictions and up to date protection software - one slip by an employee supporting a genuine customer who themselves had been infected and...!!! Anyhow, don't let these people grind you down - protect as best you can, try to stay positive, keep up the great work and your genuine followers will always support you. Thanks for the warning!
Thanks for video guys. What camera setup 24:13 you using for close up shots like this? Thanks again
I loved this segment. I work in IT and some of this is stuff that EVERYONE needs to know. The only thing I would add is to use a password manager like lastpass.
Tony, it is really cool to know your past - never knew that about you! Regarding my backup procedures, I have a RAID network attached storage computer running NAS4Free that is only accessible from within my local network, and I do not mount it as a network drive. This makes it so that any potential ransomware couldn't encrypt my NAS. I also have different user accounts on the NAS for the users, so if for example my wife's stuff got encrypted, it wont also impact me. If I were smart, I would have another storage volume on my NAS not accessible over the network that I would keep backups on, but I don't. I use this method because I don't trust any cloud hosting provider - I don't want my data to be in their hands.
Also, counter-intuitively, I haven't used any anti-virus on my PC for years. I think they give you a false sense of security, and have a larger impact to your system's overall performance than any other software. I also typically use Linux when I can (or mac) just to make it so that the likelihood of a virus actually being able to carry out its payload less likely. I am writing this comment from a PC using Linux Mint.
Hi T&C, if you are okay to use dropbox, the way I go about the auto-updating is that I make a "junction" between the folder on my hard drive that contains the photos and the dropbox app folder. This makes the dropbox app think that all of those files are in the dropbox folder and will upload them, but they are still in the original photos folder so you don't double up on files.
These are also called "symbolic links" and you make them in cmd using the mklink function.
I have also tried this with google drive, but I think the way it scans the changed/updated files is different to dropbox and it doesn't work.
The same thing happened to a guitar making company, Kiesel guitars, last year. I believe they had a bunch of $2k to $4k pieces shipped worldwide to uncommon places just to find that the buyers had scammed them using those same methods.
Hi Tony & Chelsea... question.. i'm doing a multi layer backup of my important info (mostly photos/vids, I can elaborate if you'd like to know more) and adding the offline to my solution. I'm considering cloud solution such as Backblaze or Carbonite..like cloud based solutions, but what's stopping ransomware from being copied out to the cloud copy of my data? Especially if its automatically backing up. It will detect the file has changed and basically copy the infected file over and overwrite the 'good' version stored in the cloud? Thanks again for all the great vids you guys put out!!!
Hyperdrive Colorspace UDMA 2 - I have found this device really handy and useful. It uses DMA - UDP kind of protocol to quickly transfer data from your memory cards to a HDD installed in the device. It is portable and really handy in the field.
I have experienced speeds of 266MBps speeds (2GB/min) with the device and it's pretty darn great.
Larry and Balki, Perfect strangers. Of Course! Loved that 80's show!
Hi, there seems to be a problem going on around the USA. Windows 10 won't upgrade it's security build. On the blogs this is a big problem?
I am from Chiiina! Where can I purchase your gear?
Didn't paypall changed how chargeback fees work now? (i know the video is from 2017)
at my work when they do test phishing mails, sometimes the from has typo's. and other times they just use the right name.. but its not clickable as it doesn't seem to be an actual email adress.
Backup: only problem i have with keeping the backup on your camera/sdcard is that you tend to then also save the bad photo's and waste space. so once i used a backup hard-drive and google photo's i do remove them. >
+Tony I've always had this question, what if your password manager gets compromised ?Then is there anything left to do?
What i used for a long time, was to put my nas not in raid, but in just as seperate disks. Use rsnapshot on the nas (if the nas doesn't support that you can do that with a seperate computer, preferably not connected to the internet (which is the only computer with write access to the backup disk)) rsnapshots backups to the backup disk. This backup disk is only presented to other computers (except the backup computer) as read-only. That way the chances of the backup getting ransomed is really small. You can then still use some sort of replication software on your normal computer to sync the data from the read-only disk to a location off-site. I found this a great automated system, which limits the risks greatly. I do admit that this sollution is very techy.
@Tony/Chelsea - I recommend CrashPlan for cloud backup. They encrypt everything, and has no storage limit, and has comprehensive automatic settings you can set for how often to backup, what to backup, how many versions to keep with a specific time period, as well as include additional local network or remote network backup options (for example to your friends/family's computers).
Can i buy the sdp book On iBooks or only Amazon and if i buy the digital version do i have to get a kindle or Can i view it on the computer
For maintaining a backup I use BitTorrent Sync to sync between several computers (Windows, Mac & Linux) and I manually backup to two NAS drives that are on separate network segments that are separated by a commercial grade security appliance that scans for viruses and allows me to only allow access to a certain computer when I need the access and then block the access again once I've finished copying the photos. I upload full res .jpg's to my SmugMug Pro account and I upload lower res .jpg's to Google Photos & Google Drive. Hopefully that is sufficient???
Hey Tony and Chelsea. Could you do a tutorial on Squarespace? I'm just asking because there are two choices below basic and two below online stores. Also if you are selling your photos, which company should you trust to print your photos?
what camera would you say is the best overall bang for your buck a canon 80d, nikon 610d, or a nikon 750d and what lens would you recommend for that camera.
Also FYI, you can buy a USB key on Amazon that will bypass any Windows password so don't think because you set that up that your data is safe from theft
I use Amazon Drive (UK) for part of my online cloud storage which has a client that is running in the background. Because of the way the client works no password is required - if my computer was hacked is not feasible that the cloud storage would be deleted as well? Should I be logging out of Amazon to disable the client when not in use? Any suggestions for good encryption apps/programs to store all the different passwords? Thanks, great video.
Crashplan is pretty cool. I believe they have an option where you can send them a hard drive, and they back it up for you that way. If I'm not mistaken, you pay the fee, they send you whatever size you need, then you send it back for them to backup. Their backup speed online is sooooo slow. But I think every one of the services are like that. This one seems to be the most full of features though.
The world is a scary place and the online world even more so. Thanks Chelsea and Tony for delivering this important podcast.
I saw a 60minutes type show about a year ago where they tracked down a mule. Went to their house and like you said they were also scammed out of thousands of dollars in shipping. Then they tracked items to a person in a 3rd world country, and like you said local authorities don't care.
I use Dropbox, and initially wanted to be able to access my photographs on whatever platform I was using. I relocated my entire photo directory to the Dropbox folder and had Lightroom rebuild a catalog. So backup is real time and hands off.
I'm very happy with Crashplan as an backup solution Tony. Backup to cloud, local disk, portable disk, NAS/network mapped drive, other computer . Multiple backup set configurations and scheduling, encryption, unlimited storage, data de-duplication. They have an option to "seed" a backup or restore to speed up the initial process, where they ship you a drive to copy your archive onto (initial backup) or a drive with your archive on (DR restore). All this for $50/year. And no, I don't have any relationship with Crashplan (apart from paying them each year to host my backup solution).
I do cloud backups with Arq, it's great - you can choose whatever cloud service you want, track changes, everything.
Challenge with many cloud services is they sync what is on your disk. So when the files are encrypted on your disk, it will also do this to the cloud versions. So need to find a cloud service that has snapshots and you can revert back to the snapshot.
I order ecig equipment online and some places require you to verify your identity by sending images of your id and signature. They verify your age and you are good. I know it's another step, but keeps your more protected.
I have been using Amazon Drive ($60 a year for unlimited storage). Seems to work fine however it took 30+ days to up load 1.2 tb of photos and is going to take 60 + or more days to up load 2.4 tb of movies. Does any know of a quicker uploading service?
Where do you guys sell your gear online? I'd love to have a look at some of it.
I use Amazon Cloud and the backup service it seems to work well. Apart from that i use for Time machine the hardisc only till it is full and put it then away. Also for a backup i use small 2,5" Harddrives and on location for backup, i copy it at home on the NAS and when the Harddrive is full i put it in the safe and take a new one.
Before I retired two years ago I used to sell machines for making books, printing newspapers, books, and so on. The transactions were usually between 50,000 USD and 1,000,000. In hundreds of transactions over about 15 years I never had any problems. That is because everyone paid by wire transfer or in rare instances cash in person. Wire transfers don't bounce.
For backups, I use hard drives on a linux home server on my LAN. A password is required to access the drives. My backup script logs on, backs up, and immediately logs off. I imagine malware could attack the backups during this time, but it wouldn't have a lot of time to work. I'd like to look into an even more secure connection so only certain processes on my computer (like just my backup and editing software) could access the server drives, but I haven't gotten to that yet. Seems like that and/or locking in linux-enforced read only access (which would make it less of a hassle for me to access the files) would prevent any malware write capabilities, or at least make it so difficult that it would be easier for malware to look for easier targets.
R Rugel What's preventing the attacker from grabbing your backup script that has direct access to your backups? I'm curious if you have plain text passwords stored in that script
My assumption is that a generic malware program isn't smart enough to look for a file somewhere with the password, and having a human snoop through my system(s) looking for it just isn't worth the time and effort. My theory is to make other systems look easier to attack and mine not worth the extra effort.
26:07 To answer this question, set up VMware (virtual machine) its free, right click on the link (copy link) paste to the virtual machine, nothing can possibly leak into your main machine. A less complex way would be to have a chromium based privacy browser, there are many with built in vpn, copy the link into that browser and if its sketchy close the browser and it will automatically delete any cookies and will not save anything locally. This will also train your eye and you will easily identify click baits.
29:15 When I was in IT around 2015 was a dangerous year for ransomware. Many of our clients were attacked and there is NO fix for it, the only one's that surviced and got everything back were the ones that had a backup plan, we used shadow protect where it will back up nightly to a server and incremental backups every 15 minutes, so in general most clients only lost about 7-8 minutes of work. Backing up to hard drives is not back up, its simply making copies.
In general criminals will not waste time on personal computers but more so businesses with domain names as they would potentially have more valuable information and more importantly, more value in the organisation.
Always use an automated back up service its worth the money especially when you have a business or valuable information. In a business, you would use one server and everything runs off it, the server gets backed up daily and will remain perfectly safe in an attack or even a building fire.
I hope this helps half as much as you've helped me with photography, I listen to your podcasts daily. Thanks for your efforts.
I can share a story too. I live in greece and I hear these things happen here too. A friend of mine bought a DELL laptop from US through amazon. a month after he was using it, the damn thing broke. he contacted DELL in greece and gave them the serial number. they told him that the laptop does not exist in their data base or any world wide DELL database. then he contacted amazon. they asked him to ship the laptop to them, they reimbursed him the money he paid for the laptop as well as the cost of shipping. things in US I guess work in a more honest-efficient way than in any other place on earth.
Google Photos is my favorite app on my phone. With the understanding that it is not storing full resolution images for free (you can pay for that), the free version is a life saver. Moving from phone to phone over the years and knowing that my photos are always backed up is amazing. You can have it synced to automatically on your computer as well. It's free and you have nothing to lose. While you're searching for the best option, give it a shot, but I love it.
Greg Van Gorp You just have to trust Google :)
It sure would be hard to send a package to Yugoslavia.
Filip Reuterberg u could be right......
same for Czechoslovakia
It's very common to ship to a different address and name than the billing one, many many people ship the items to their workplace or to a friend/family member who's at home all the time so they don't have to drive to the post office to get the goods.
Continuous automated monitoring can be a big help was well, if your file checksums or file sizes start failing, you've got an early warning. Some online backup services allow you to initially send physical disks to them in order to cut out the initial upload time. On Linux, cron + Rsync over key based ssh is the perfect system. Automated, encrypted, and efficient (sends only deltas). Can be setup on Windows and Mac as well with some work. And BSD, etc..
Note to self, never piss off Tony, he will hack me.
Great show! BTW, the cars with the auto-parallel parking mode can have the entire thing taken over - steering, throttle, brakes, all of it. (not to mention auto-pilot like Tesla)
Perhaps the best approach is to divide and conquer. First Sunday save to the cloud service A. The second Sunday, an offline drive. Third Sunday cloud service B, last Sunday burn DVDs with data since your last offline hard drive back-up. Keep a log book as to which date ranges are stored where. That way you have a complete back up in the cloud (not all in one service) and one complete backup offline, but not on one type of media or location. This spreads the risk of an entire loss on a single back-up to a partial loss on one of several back-ups. Which could be recovered from either the on-line or off line sources.
That's called offline storage not air gap, air gap would be physically separate systems, my studio is completely offline physically separate network and not part of the rest of the office network.
Hey tony, Sorry I want to know something off this topic... I just bought Nikon D500(with your suggestion) and now I want to print some of my Images. Can you please suggest me a "Good/budget" printer? I've looked through Google but the results are mixed up, So if you could suggest me, it'll be great help.
Thank you! :)
Great video - what are you thoughts on programs like LastPass for storing/entering passwords
Was the previous upload of this video hacked??
Audio wasn't synced up
So basically you sent the camera according to an email received on your seller account that was saying that your camera was sold and you need to ship to the address?
I got a lot of emails like this when having one of my cameras for sale at the firsttime i was so close to send it myself but i had a routine that saved me form doing it.
Just that every time a sold an item there was an invoice to be printed and always it was not on my email but in my seller account and there was no invoice in the seller account...
No. Someone bought the cameras with a credit card, and we received payment. We would later discover that the credit card was stolen, and the credit card company took the money out of our account.
i use google photos to upload my jpegs. you can change the settings to save the full resolution jpegs. the storage is not unlimited, but you can upgrade the storage. I never save my raw files after I edit them. all the changes that require a lot of the raw data have been made and colour changes and such can be done with jpegs
I feel you guys, I have a small business here in Michigan (smoke shop) and this guy came in and bought 7 cartons of cigarettes his total was close to 500 dollars he paid with a credit card that had his name on it ID and everything matched. Turn out its a scam and the card was stolen from a person in California and credit card terminal bank would not reimburse me when that person disputed the charge and I ended up with a great loss.
Google drive too have a desktop client in which you can assign a drive or folder to continuously backed-up in real time
Holy moly. Who knew!? Sorry that happened to you guys! Thanks for helping us avoid the same situation! You guys rock!!
Oh hey there! Thanks for watching
If you insure your packages when sending them, and someone defrauds you, does the insurance cover it?
Whats the scam on Amazon where someone is selling camera's dirt cheap? I thought I was buying a low, low cost Sony A6000 but Amazon said it was not a real listing. It was a Seller with no Feedback and they want you to email them before you Buy it. I knew it was probably a fake listing.