Search This Blog

Monday, January 17, 2011

Internet Security - Simple ways to save yourself(part 1)

Do you know some very basic things to keep your information secure?  Can you pinpoint a phishing email just by the appearance of it?  Can you smell a crook's new email trick within 10 seconds of clicking on that new message?

No? then something is wrong, there are some very basic common sense tactics every internet user can utilize to figure out who sent them the email, or if they are who they say they are.

1.  Just about anyone can send a email from 'security-response@worldbank.com', its childs play, in fact thats one of the first lessons I learned when I got online, how 'insecure' email really is.

Email, is a simple text based technology, and anyone with the correct script, or program can point at IP's (your computer) at random, or by design, to snatch data.  I dont want to scare you from telling about your big birthday bash on the 13th of November for uncle john from Quebec City, but that is the first step of a scammers information, now they gotta figure out who 'uncle john' is, and find out how old he is... not really hard if you ask yourself some common sense questions, and seek out the answers....

This is why its important for you to be aware of how scammers, phishers, etc grab information from you, in fact one of the easiest ways is on facebook, very FEW people I noticed have dug into the privacy settings to learn how to secure their data.

I can glance at over 80% of facebook users profiles and find out their birthday, including year.
I can glance at the same users, and figure out where they worked
I can glance at the same users and figure out what they might have as a hobby
I can glance at the same users, and figure out who they are friends with, and who are family (or make a generalized guess that makes me look like I know what I am talking about)

So, the email you sent out about uncle john's birthday party, gives me your email address, and uncle johns birthday.  From here I go to facebook (or other social networking site) and enter your email address (if not your name if I have it in the email).

I can then glance at your friends, and family, if your privacy settings are not secured, and find anyone with 'John' as a name, its short work afterwards to glance through all your 'John' contacts, looking for someone who is in Quebec, or might be french, or might have a birthday.. on or about the 13th of November.

When you call to have services connected, disconnected, or moved, one of the first things they ask, is your birthday, address etc, all this information is easily accessible on MOST people online, specially if they are on facebook.

Do you really want to know more?  Go learn how to set your privacy settings on facebook, and be careful HOW MUCH information you put in your emails.

PS:  Emails, FTP, Telnet, general CHAT protocols are TEXT BASED and NOT ENCRYPTED, and thus, open to something called 'sniffing packets' which opens up your private world to those who know how.