Profilo di Due DiligenceiSafetyFotoBlogElenchiAltro Strumenti Guida

Blog


VIRUSES AND WORMS

iSAFETY BASICS: VIRUSES AND WORMS

What are they?
Malicious small programs that easily replicate themselves, infect your computer, and often spread to others’ computers via email attachments or network traffic.

What risks are involved?
Virus programs can delete files, format disks, attack other computers or just make your system run slowly. They can also create a “back door” that allows a hacker to run programs on your computer or to gain access to your files.

How do I know if I have a computer virus?
A computer infected with a virus may suddenly act in unexpected ways. For example, it may take longer to access files or to start up programs, or it may lock up often. You may also notice uncommon sounds being played from your speakers, a variety of images popping up on the screen, or problems starting your computer. These are all signs that your computer could be infected with a virus.

What can I do to protect myself?

  • Install anti-virus software on your computer and run daily updates. You view a list of Microsoft, recommended Antivirus vendors.
  • Pick up “patches” at your operating system’s Web site to keep your computer fortified against possible attack.
  • Visit House-Call by Trends Micro page to scan your computer for the virus infections and other critical security risks. PC health-check
  • Reduce potential harm of a virus or worm infection by frequently backing up all of your files.
  • Since 87% of viruses originate and are transmitted via email, do not open email attachments with suspicious subject lines, file names, or messages. Some viruses can forge themselves to appear as if they are from someone you know, therefore, the “from” line alone cannot be trusted.
  • Be aware that viruses may come to you in links sent via Instant Messaging, email attachments, infected disks, freeware, shareware, or file-sharing.

Support

Here at iSafety we can Tutor and repair online through “RA” or if you are live local to Kingston, Ontario we can show you in person though our partner, RBS (Robert Bidgood Services).  Contact email or 613-320-5010

ANTI-VIRUS SOFTWARE

iSAFETY BASICS: ANTI-VIRUS SOFTWARE

What is it?
Anti-virus software protects email, instant messages, and other files by removing viruses and worms. Anti-virus software downloads new virus protection updates to protect against new threats. It also quarantines infected files to keep a virus from spreading on your computer and can repair infected files so you can use them without fear of damaging your computer or spreading a virus to others.

What risks are involved?
If your computer isn’t fortified against the most recent viruses, you leave your system wide open for every bug, worm, and virus floating around the Internet. These debilitating bugs and viruses can cause your computer to malfunction. They may also make your computer and information on the computer vulnerable to identity thieves and hackers.

What can I do to protect myself?
Install anti-virus software on your computer and run daily updates.

How do I know if I have anti-virus software on my computer?
A computer with a properly installed anti-virus software will generally prompt you to update the program every once and a while. If your computer doesn’t ask you to update virus definitions, you may not have virus software properly installed. Some of the most common antivirus packages include: Symantec, McAfee, and Trend Micro. You can search your computer for these names by clicking “Start” and pointing to “Search.”

Support

Here at iSafety we can Tutor and repair online through “RA” or if you are live local to Kingston, Ontario we can show you in person though our partner, RBS (Robert Bidgood Services).  Contact email or 613-320-5010

SOFTWARE PATCH UPDATES

iSAFETY BASICS: SOFTWARE PATCH UPDATES

What is it?
Patches are updates that “fix” an inherent flaw in your operating system, the basic program that runs your computer such as Windows 2000, Windows XP, or Macintosh OS X. Patches are released on an as-needed basis from your operating system vendor (such as Microsoft or Apple) and should be installed as soon as they are available.

What risks are involved?
If your operating system goes unpatched, it leaves your computer vulnerable to hackers as well as worms and viruses.

What can I do to protect myself?

  • Windows users can set their computers to download operating system updates on a regular basis. Look in your Control Panel and find System or Automatic Updates. You can also find Windows updates in the Tools menu in Internet Explorer, or by visiting Microsoft's Web site at http://windowsupdate.microsoft.com/.
  • Although updates are required less frequently on Macs than on Windows, Mac users should still regularly update their computers. Mac OS X users can consult the "software update" pane in the System Preferences utility to manually or automatically schedule updates.

Support

Here at iSafety we can Tutor and repair online through “RA” or if you are live local to Kingston, Ontario we can show you in person though our partner, RBS (Robert Bidgood Services).  Contact email or 613-320-5010

SPYWARE

iSAFETY BASICS: SPYWARE

What is it?
Spyware is software that gathers information about your Web-surfing habits for marketing purposes. Spyware “piggybacks” on programs you choose to download. Tucked away in the fine print of user agreements for many “free” downloads and services is a stipulation that the company will use spyware to monitor your web habits for business research purposes.

What risks are involved?
Spyware takes up memory and space on your computer. It can slow down your machine, transmit information without your knowledge, and lead to general computer malfunction. One of the most widely-used Web browsers, Internet Explorer is especially susceptible to spyware-related problems. You may choose to keep certain spyware programs on your computer in exchange for the free services that accompany them, but you should be aware of how that might affect your computer.

What can I do to protect myself?

  • Instead of Internet Explorer, try using Mozilla Firefox.
  • Closely read user agreements for free programs before clicking, “I accept.” Watch for allusions to spyware and adware in user agreements.
  • Regularly scan your computer with an anti-spyware program.

Support

Here at iSafety we can Tutor and repair online through “RA” or if you are live local to Kingston, Ontario we can show you in person though our partner, RBS (Robert Bidgood Services).  Contact email or 613-320-5010

ADWARE

iSAFETY BASICS: ADWARE

What is it?
Adware is a component in software applications that displays ads while the program is running. For example, adware is included with web-based email programs that give you free email in exchange for viewing ads. Adware “piggybacks” on programs you download from the Internet. Be aware that the fine print of user agreements for many “free” downloads and services usually states that the company will use adware to post advertisements on your computer. When you accept the agreement, you accept those terms.

What risks are involved?
Adware takes up memory and space on your computer. It can slow down your machine, transmit information without your knowledge, and lead to general computer malfunction. You may choose to keep certain adware programs on your computer in exchange for the free services that accompany them, but you should be aware of how that might affect your computer.

What can I do to protect myself?

  • Closely read user agreements for free programs before clicking, “I accept.” Watch for allusions to adware in user agreements.
  • Regularly scan your computer with an anti-adware program.

 

Support

Here at iSafety we can Tutor and repair online through “RA” or if you are live local to Kingston, Ontario we can show you in person though our partner, RBS (Robert Bidgood Services).  Contact email or 613-320-5010

ANTI-SPYWARE

iSAFETY BASICS: ANTI-SPYWARE

What is it?
Anti-spyware is software that can detect and remove spyware from your computer. Spyware programs often “piggyback” on programs you choose to download “free” from the Web. You may have numerous such programs on your computer and not be aware of it. Anti-spyware scans your computer and shows you how many spyware programs you have downloaded. You can then choose to delete these programs or keep them on your computer.

What risks are involved?
If you do not use an anti-spyware program, you may never know if you have spyware on your computer. Left unchecked, these programs can cause a number of problems, including slow processing of your computer, malfunction of a certain program, and use of your internet connection when you’re not online.

What can I do to protect myself?

  • PC users can download Spybot Search and Destroy, available for free at http://www.safer-networking.org.
  • Windows offer a free program called Windows Defender (Beta 2) is a free program that helps protect your computer against pop-ups, slow performance, and security threats caused by spyware and other unwanted software. It features Real-Time Protection, a monitoring system that recommends actions against spyware when it's detected, and a new streamlined interface that minimizes interruptions and helps you stay productive.
  • Anti-spyware tools for Macintosh computers are available, although spyware programs have been uncommon for Mac users. One such resource is Allume Systems, available at www.allume.com.

Support

Here at iSafety we can Tutor and repair online through “RA” or if you are live local to Kingston, Ontario we can show you in person though our partner, RBS (Robert Bidgood Services).  Contact email or 613-320-5010

ANTI-ADWARE

iSAFETY BASICS: ANTI-ADWARE

What is it?
Anti-adware is software that can detect and remove adware from your computer. Adware programs often “piggyback” on programs you choose to download “free” from the Web. You may have numerous such programs on your computer and not be aware of it. Anti-adware scans your computer and shows you how many adware programs you have downloaded. You can then choose to delete these programs or keep them on your computer.

What risks are involved?
If you do not use anti-adware programs, you may never know if you have adware on your computer. Left unchecked, these programs can cause a number of problems, including slow processing of your computer, malfunction of certain programs, and use of your internet connection when you’re not online.

What can I do to protect myself?

  • PC users can download the free anti-adware program Ad-aware at www.lavasoftusa.com.
  • See Anti-Spyware for related information and resources.

Support

Here at iSafety we can Tutor and repair online through “RA” or if you are live local to Kingston, Ontario we can show you in person though our partner, RBS (Robert Bidgood Services).  Contact email or 613-320-5010

IDENTITY THEFT

iSAFETY BASICS: IDENTITY THEFT

What is identity theft?

Identity theft occurs when personal information is obtained by unauthorized individuals who then use that information to commit a crime such as fraud or theft.

Who is at risk for identity theft?
Everyone. Careful management of personal information, identification, and passwords can help minimize your risk.

What are the risks?
Victims of identity theft often have to spend time and money cleaning up their personal and financial records. In the meantime, they may be refused loans, housing or cars, or even get arrested for crimes they didn’t commit.

What can you do to protect your identity
1. Watch for shoulder-surfers. When entering a PIN number or a credit card number in an ATM machine, at a phone booth, or even on a computer at work, be aware of who is nearby and make sure nobody is peering over your shoulder to make a note of the keys you’re pressing.

2. Require photo ID verification. Rather than signing the backs of your credit cards, you can write “See Photo ID”. In many cases, store clerks don’t even look at the signature block on the credit card, and a thief could just as easily use your credit card to make online or telephone purchases which don’t require signature verification, but for those rare cases where they do actually verify the signature, you may get some added security by directing them to also make sure you match the picture on the photo ID.

3. Shred everything. One of the ways that would-be identity thieves acquire information is through “dumpster-diving”, aka trash-picking. If you are throwing out bills and credit card statements, old credit card or ATM receipts, medical statements or even junk-mail solicitations for credit cards and mortgages, you may be leaving too much information laying about. Buy a personal shredder and shred all papers with PII on them before disposing of them.

4. Destroy digital data. When you sell, trade or otherwise dispose of a computer system, or a hard drive, or even a recordable CD, DVD or backup tape, you need to take extra steps to ensure the data is completely, utterly and irrevocably destroyed. Simply deleting the data or reformatting the hard drive is nowhere near enough. Anyone with a little tech skill can undelete files or recover data from a formatted drive. Use a product like ShredXP to make sure that data on hard drives is completely destroyed. For CD, DVD or tape media you should physically destroy it by breaking or shattering it before disposing of it. There are shredders designed specifically to shred CD / DVD media.

5. Be diligent about checking statements. This actually has two benefits. First, if you are diligent about checking your bank and credit statements each month, you will be aware if one of them doesn’t arrive and that can alert you that perhaps someone stole it from your mailbox or while it was in transit. Second, you can ensure that the charges, purchases or other entries on the statement are legitimate and match up with your records so that you can quickly identify and address any suspicious activity.

6. Pay your bills at the post office. Never leave your paid bills in your mailbox to be sent out. A thief who raids your mailbox would be able to acquire a slew of critical information in one envelope- your name, address, credit account number, your bank information including the routing number and account number from the bottom of the check, and a copy of your signature from your check for forgery purposes just for starters.

Drop your bills at the post office or at least in an official U.S. Postal Service drop box to ensure that doesn’t happen.

7. Limit the information on your checks. It may be convenient to have your drivers license number or social security number imprinted on your personal checks to save some time when you write one, but if it falls into the wrong hands it reveals too much information. In fact, some recommend that you only include your first initial in the name space of your check, such as “T. Bradley” rather than writing out “Tony Bradley” so that if someone did get one of your checks they would not know your full name.

8. Analyze your credit report annually. This has always been good advice, but it used to cost money, or you had to first be rejected from receiving credit so that you could get a free copy. Now it is possible to get a free look at your credit report once per year. The big three credit reporting agencies (Equifax, Experian and TransUnion) joined forces to provide free credit reports to consumers. The web site, annualcreditreport.com, is currently available for the Western and Mid-Western states, with the Southern and Eastern states being rolled out later this year. You should review it to make sure the information on it is accurate and also make sure that there aren’t any accounts on there that you aren’t aware of or any other suspicious entries or activity.

9. Protect your Social Security number. I don’t personally believe in Social Security or any attempts to repair or reform it. I have no illusions that it will actually be around to pay me when I retire. But, whether that comes to pass or not, the Social Security Number has become the one thing they had always promised it wouldn’t- a sort of national identification number. It is often suggested that you do not carry your Social Security in your wallet with your drivers license and other identification. For one thing, although they expect it to last your whole life, the Social Security card is issued on very flimsy cardboard that doesn’t hold up well to wear and tear. Aside from that though, knowing your full name, address and full Social Security Number, or even the last 4 digits in many cases, can let a thief assume your identity. You should never use your Social Security Number as any part of a username or password that you establish and you should never divulge it to telephone solicitors or in response to spam or phishing scam emails either.

10. Caveat Emptor. I will offer my apologies in advance, and I mean no offense to smaller businesses just building themselves up or getting established, but I recommend you not do business online with companies you don’t know anything about. You can feel relatively secure doing business online with Amazon.com or BestBuy.com or any web site affiliated with well-known, national or global merchants. But, if you are buying something online you need to have some level of trust that the company you are doing business with is legitimate and that they take the security of your personal information as seriously as you do. When you do make online purchases, read the companies online privacy policy first to ensure you agree with it and make sure you are on a secure or encrypted web site (symbolized by a small padlock at the bottom right of the screen in Internet Explorer).

 

PHISHING

iSAFETY BASICS: PHISHING

What is it?
The term “phishing” (pronounced “fishing”) refers to a form of fraud that uses email messages that appear to be from a reputable business (often a financial institution) in an attempt to gain personal or account information. The email message typically includes a link to a fake Web site that appears identical to a legitimate page. The fake Web page is used to collect the requested information. This information is then used for fraudulent purposes.

Recently, phishing tactics have been used to obtain money and information from individuals wishing to donate to disaster relief funds. When making donations, please contact reputable relief organizations directly to prevent fraudulent use of your donations and/or personal information.

What risks are involved?
Once personal or account information is obtained, “phishers” may access your bank or credit card accounts, open new accounts in your name, or cash counterfeit checks on your account. For more information, see Identity Theft.

What can I do to protect myself?

  • Be suspicious of messages requesting personal or account information.
  • Be suspicious of messages threatening to close or suspend your account on short notice.
  • Do not click on links in email messages. The text you see as the link may not be where the link takes you. Instead, type the Web page address in your browser.
  • Check the authenticity of email messages by calling a company phone number known to be genuine.
  • File a complaint with the Internet Fraud Complaint Center.
  • See the Cyber-Safety Basics for information about protecting yourself and your computer from threats like phishing scams.

Examples of Phishing Scam Email Messages and Web Sites

  • AOL – Verify your account
  • eBay – Update or verify your account information’s
  • Visa – Notice from VISA
  • Washington Mutual – WARNING: CONFIRM YOUR ONLINE BANKING ACCOUNT

SPAM

i-SAFETY BASICS: SPAM

What is spam?
Unsolicited commercial email (from legitimate or illegitimate sources), recognizable by its suspicious subject lines and unexpected or unknown sender.

What risks are involved?
For the most part, spam is an annoyance. Spam often contains questionable content and may include attachments that contain viruses.

How can I reduce the amount of spam I receive?

  • Set up  spam filtering.
  • Set up filtering in your email client (Outlook, Eudora).
  • Set up Allow/Deny lists.
  • DO NOT respond directly to the mail. Generally, doing so merely verifies your address.
  • As recourse, send a complaint to the sender's Internet Service Provider, the postmaster at the sending site, and each site that relayed the mail.
  • When drafting complaints, make sure you have the sender’s email IP address from the email header. Read this how to for more info

What are allow and deny lists?

 

Allow and deny lists are enhancements to your email spam filtering service. Most ISP provides this service as part of there package including Hotmail, AOL and etc. Email recipients who have opted in to this service can customize it by creating allow and deny lists. All email originating from addresses on an individual’s “deny” list is prevented from reaching that individual’s inbox. All email originating from addresses on the individual’s “allow” list is permitted to reach that individual’s inbox, even if it would otherwise have been marked as spam and filtered away from the inbox.

 

Why implement Allow/Deny Lists?

  • Allow and deny lists permit individuals to specify addresses from which they do or do not want to receive email.
  • No single spam filtering measure filters 100% of spam. Allow and deny lists add an extra layer of protection against spam.

Legitimate email messages from news lists or subscriptions to professional online magazines or other publications may be filtered as spam (a “false positive’). By placing the sender’s email address on their allow lists, recipients of these types of messages ensure that they will not be filtered as spam

IRC Bots

iSAFETY: IRC Bots

What is it?
IRC is short for Internet Relay Chat. IRC appears most popularly in software such as AOL Instant Messenger, Yahoo! Messenger, and ICQ.

A bot, or robot, is automated software set to perform certain functions. Many programs feature bots, which are not always malicious programs. An example of a peaceful IRC bot is a digital chat room moderator that boots and bans users who flood the channel with spam. Over the years, however, many malicious IRC bots have integrated themselves into popular programs and are proving to be a growing security risk.

What risks are involved?
Some IRC bots are used to log the text of channel or instant message chats. If a malicious bot serves this function, it could be recording everything you type. Should you mention sensitive information such as credit card or bank account numbers, you are at risk for identity theft.

A bot can also create a backdoor on your computer, giving hackers quick access to your system. A hacker could then search your files for important information, or use your computer to commit digital crimes - such as hacking into a more important computer system - that will be traced back to you.

What can I do to protect myself?
Malicious bots tend to be both partnered with unofficial modifications to the IRC and integrated into spyware applications. To avoid these bots, never download an unofficial addition to a legitimate program and be sure to:

  • Run an anti-spyware program on a weekly basis
  • Virus scan all files on a weekly basis
  • Download and install the latest operating system patches
  • Enable Windows Firewall and/or purchase a third party firewall program

How do I know if I have an IRC bot on my computer?
Some bots do not have a visual impact on your computer, so you may not notice their presence. Others may slow your computer or show symptoms similar to those of spyware and viruses.

The CERT-In: Indian Computer Emergency Response Team site explains the functions of an IRC bot in detail and lists a technique to help Windows users locate IRC bots that may be running on their systems.

For more information about IRC bots that open backdoors on systems, including symptoms and methods of removing the bot, visit http://www.winmasterlock.com/listings/i/ircbackd.htm.

Securityspace.com offers a free malicious IRC bot vulnerability test for registered users (registration is also free) at http://www.securityspace.com/smysecure/catid.html?id=14841.

 

DATA BACKUPS

iSAFETY BASICS: DATA BACKUPS

What is it?
To back up your files, simply create a second copy of your important documents somewhere other than your computer’s hard drive.

What risks are involved?
If you don’t back up your data, you run the risk of losing it. Your files could disappear due to a virus, computer crash, accidental keystroke, theft, or external disaster.

What can I do to protect myself?

  • Back up critical and essential files on a daily basis and non-critical files on a weekly or monthly basis. You can back up your data to a CD, to an online back up service (for a small monthly fee), flash drive, USB key, or to a server, if you can get access to one from your Internet Service Provider or commercial vendor. Some companies offer automatic backups when you purchase their programs.
  • Keep all your critical files in one place so you can easily create a duplicate copy.
  • Store your backup media (CDs, disks, backup server, etc.) in a safe and secure place away from your computer, in case of fire or theft.
  • Periodically test the capability to restore from the backup media. It’s of little value to have a backup that is unreadable. To ensure that your backup files are reliable, simply upload the files to your computer.

What Can iSafety do to protect me?

 

  • Here at iSafety we can Tutor online through “RA” or if you are local to Kingston, Ontario we can show you in person though our partner, RBS (Robert Bidgood Services).  Contact email or 613-320-5010

EMAIL ATTACHMENTS

iSAFETY BASICS: EMAIL ATTACHMENTS

What is it?
A virtual package sent via email, usually a Word document from a colleague, or a photo from a friend.

What risks are involved?
Sometimes the attachment isn’t so friendly: could be a document that, upon opening, loads a virus onto your hard drive. Some infected attachments could bring your whole system down by causing a hard-drive crash; others could open a port for hackers to invade your system. Others are designed to gnaw their way into flaws in your operating system. Some viruses are so smart that they attach themselves to emails from people you know and trust, tricking you into thinking the attachment is safe.

What can I do to protect myself?

  • Install anti-virus software on your computer and update it daily. It will catch a majority of infected attachments.
  • Do not temporarily disable anti-virus software on your computer – it’s too easy to forget to re-enable the software.
  • Keep your computer updated with the current security patches as infected email attachments may attempt to exploit program vulnerabilities.
  • Just don’t open attachments unless you are certain of the sender AND the contents of the attachment.

What Can iSafety do to protect me?

  • Here at iSafety we can Tutor online through “RA” or if you are local to Kingston, Ontario we can show you in person though our partner, RBS (Robert Bidgood Services).  Contact email or 613-320-5010

FILE SHARING

iSAFETY BASICS: FILE SHARING

What is it?
Swapping music, movies, games, and other media with other users on a local network or peer-to-peer (P2P) program online. Examples of P2P programs include Kazaa, Morpheus, and Napster.

What risks are involved?
In addition to downloading viruses that shared files could contain, you could be breaking national copyright laws. Thus, not only might you infect your computer, you might also put yourself at risk for lawsuits and hefty fines. You may also be downloading spyware - software that gathers personal information about you without your knowledge, allows hackers to access your personal files and programs, and may put you at risk for identity theft.

How can I tell if a file I've received contains a virus?
When running files that you have downloaded from other Internet users, be careful that the file and file type are indeed what you were expecting. For example, “Elvis_Greatest Hits.mp3.exe” is not really an MP3; in fact, it’s an executable file that is most likely a virus. In addition, many viruses may have an icon with a white screen surrounded by a blue border. Another common image is a pair of gears. If the file looks unusual, don’t take the chance.

What can I do to protect myself?

  • Keep your anti-virus program updated and install the latest security patches on your operating system.
  • Use freeware and shareware only from sources that you trust. Scan anything with your anti-virus software before installing it on your computer. Be wary of executable (.exe) files since they install immediately on your computer.

What can iSafety do to protect me?

  • iSafety can keep your computer clean and running smooth with a preventative maintenance cleaning appointments Through RBS (Robert Bidgood Services) RBS. We ensure you’re anti’s programs are up to date and a full scan is conducted
  • Legally, iSafety can’t protect you if a copyright-holder sues you for trading or downloading their property (songs, movies, software, etc.). It is your legal responsibility to respect copyright agreements on file-sharing networks
  • Here at iSafety we can Tutor online through “RA” or if you are local to Kingston, Ontario we can show you in person though our partner, RBS (Robert Bidgood Services).  Contact email or 613-320-5010

FIREWALLS

iSAFETY BASICS: FIREWALLS

What is a firewall?
A firewall acts as a protective barrier between your computer and the internet, monitoring all incoming and/or outgoing traffic and allowing only the network traffic you permit. Firewalls come in the form of software, which nestles itself between your operating system and your network card. They also come in the form of hardware; for many home and small office users, it is a simple router device that sits between your computer’s network jack and the wall connection. You can customize the level of protection the firewall gives you, setting it to filter information flow from specific domain names, addresses or types of network traffic.

How does a firewall work?
Hackers search the Internet in a way akin to dialing random phone numbers. They send out pings (calls) to random computers and wait for responses. Firewalls prevent your computer from responding to these random calls. If your computer doesn't respond, hackers won't know it's there.

What are the risks of not having a firewall?
If your computer, like most, is automatically set to enable file sharing or to keep network ports open while you are online, you could be susceptible to a variety of attacks. If you don’t have a firewall, which will monitor ports to stop unwanted traffic from slipping through, you have to know how to manually close ports and disable file sharing in order to control risky traffic from coming in to your computer.

What do I need to know before installing a firewall?

  • A firewall is not the single solution to computer problems. As with other computer security measures, malicious programs disguised as friendly ones can circumvent a firewall.
  • Like any add-on to your computer, a firewall can interfere with other applications on your system.
  • Firewalls may prevent campus vulnerability scanners from alerting you of a problem on your computer.
  • Because you can customize the level of protection a firewall offers, before installing a firewall you should decide which kinds of network traffic to permit through the firewall. It is not always easy to determine which kinds of traffic are safe or unsafe.
  • If your computer comes with basic firewall capability or if you are thinking of installing a firewall, you should contact your local tech-support person first.

Support

  • Here at iSafety we can Tutor online through “RA” or if you are local to Kingston, Ontario we can show you in person though our partner, RBS (Robert Bidgood Services).  Contact email or 613-320-5010

INSTANT MESSAGING

iSAFETY BASICS: INSTANT MESSAGING

What is it?
These software chat programs are among the most popular, convenient ways in which classmates, colleagues, family and friends communicate with one another via computers in real-time.

What risks are involved?
Viruses can be very easily transmitted via instant messages containing files or links. IM programs, like all software, may also contain bugs and flaws that could compromise your computer. And because IMs are not encrypted, there is always the possibility that a third party is monitoring your messages.

What can I do to protect myself?

  • Update IM software when the latest versions are released.
  • Do not share identifying information, such as credit card or social security numbers, over IM.
  • Reset your password often.
  • If you’re programming-savvy, try using an open-source IM program such as gaim or Fire, which tend to have fewer security flaws.
  • If a stranger requests that you check out a URL, don’t click on the link (chances are it’s infected).

 

Support

  • Here at iSafety we can Tutor online through “RA” or if you are local to Kingston, Ontario we can show you in person though our partner, RBS (Robert Bidgood Services).  Contact email or 613-320-5010

PASSWORDS

iSAFETY BASICS: PASSWORDS

Protecting Your Passwords
In order to safeguard your computing accounts, you need to take steps to protect your password. When choosing a password,

  • Don't use a word that can easily be found in a dictionary — English or otherwise.
  • Use at least eight characters.
  • Use a combination of characters, numbers and special characters.
  • If you need to write your password on a paper, safeguard the paper in a locked drawer or cabinet rather than posted to the monitor or under the keyboard. Better yet, use a phrase to help you remember your password, such as: MdHF&NAW! (My dog Has Fleas and Needs A Wash!)
  • Don't share your password — protect it the same as you would the key to your residence. After all, it is a "key" to your identity.

Password Reset


To protect user accounts in the event that the user forgets the password, every local user should make a password reset disk and keep it in a safe place. Then, if the user forgets his or her password, the password can be reset using the password reset disk and the user is able to access the local user account again.

The Forgotten Password Wizard lets you create a password reset disk that you can use to recover your user account and personalized computer settings if you forget your password.

How to create the password reset disk

The steps to perform this task differ depending on whether your computer is a member of a network domain or is part of a workgroup (or is a stand-alone computer).

If you're using Windows XP in a workgroup (and not in a domain), you have the option to create a password reset disk.

To create the password reset disk go to the Start menu, Control Panel, User Accounts.

1.        Click your account name.

2.        Under Related Tasks located on the left side of the window, click Prevent a forgotten password.

3.        In the Forgotten Password Wizard, follow the instructions as they appear on the screen.

4.        When the wizard starts, click Next.

5.        Select the drive that contains the media you want to create the information on (you can use a diskette or a Zip disk), and click Next.

6.        Type your current password, and click Next.

7.        Click Finish.

The password reset disk contains only one file called userkey.psw, which is an encrypted version of your password. If you change your password, the password reset disk is useless, you must repeat this procedure.

How to use the password reset disk

If you made a password reset disk for your local user account through the Forgotten Password Wizard, you can use it to access the computer, even if you have forgotten your password. The following steps will only work if you are in a workgroup environment, using the Welcome screen.

1.        At the Welcome screen, click your user name, and then type your password. If you have forgotten your password, the Did you forget your password message is displayed.

2.        Click use your password reset disk to start the Password Reset Wizard.

3.        Follow the instructions in the Password Reset Wizard to create a new password.

4.        Log on with the new password, and then store your password reset disk in a safe place in case you need it to reset your password in the future. You do not need to make a new password reset disk.



Managing Passwords

Password policies often include advice on proper password management such as:

·          never sharing a computer account

·          never using the same password for more than one account

·          never telling a password to anyone, including people who claim to be from customer service or security

·          never writing down a password

·          never communicating a password by telephone, e-mail or instant messaging

·          being careful to log off before leaving a computer unattended

·          changing passwords whenever there is suspicion they may have been compromised

How We Can Help

Ever wondered how to recover or reset a forgotten password in WindowsXP? We can help you get back into your computer, all without reinstalling the operating system.

  • Here at iSafety we can Tutor online through “RA” or if you are local to Kingston, Ontario we can show you in person though our partner, RBS (Robert Bidgood Services).  Contact email or 613-320-5010

SHOPPING ONLINE

iSAFETY BASICS: SHOPPING ONLINE

What is it?
Almost anything can be purchased online these days if you have an Internet connection and a credit card.

What risks are involved?
If the site you’re shopping on doesn’t use data-security methods (such as encryption), your credit card or identity information could be transmitted into cyberspace, making it available to identity thieves. Illegitimate businesses could sell your personal information to other businesses or spammers, compromising your privacy.

What can I do to protect myself?

  • Look for the padlock icon in the lower corner of your web browser, indicating the site is encrypted and that your personal information is protected as it moves between your browser and the site’s web server.
  • Look at the URL of the site. In “https://” the ‘s’ means SECURE data transmission.
  • Read the site’s privacy policy. Most legitimate businesses promise not to sell your personal info to other vendors. If you can’t find the privacy policy consider this as a strong danger signal.
  • Don’t buy if they don’t offer you a way to print a receipt.
    • Consider how reputable the store is since you are trusting them to safeguard your name and credit card number.

WIRELESS NETWORK

iSAFETY BASICS: WIRELESS NETWORK

 

What is it?
The freedom to browse the Internet while sitting at your favorite café or setting up your computer or moving around your home with your PC Tablet or Laptop with out the limitation of a network wire. Wireless networks are sprouting up everywhere.

What risks are involved?
Because wireless access points don’t require a user to plug into a port, the networks are often more difficult to monitor and secure. Many off-campus wireless areas won’t require you to sign in with a username and password. If you’re buying things online or logging on to Internet applications, it’s a lot easier for someone to record your keystrokes and steal your identity.  

Secure your wireless router or access point administration interface 

Almost all routers and access points have an administrator password that's needed to log into the device and modify any configuration settings. Most devices use a weak default password like "password" or the manufacturer's name, and some don't have a default password at all.  As soon as you set up a new WLAN router or access point, your first step should be to change the default password to something else. You may not use this password very often, so be sure to write it down in a safe place so you can refer to it if needed. Without it, the only way to access the router or access point may be to reset it to factory default settings which will wipe away any configuration changes you've made. 

 

2) Don't broadcast your SSID

Most WLAN access points and routers automatically (and continually) broadcast the network's name, or SSID (Service Set IDentifier). This makes setting up wireless clients extremely convenient since you can locate a WLAN without having to know what it's called, but it will also make your WLAN visible to any wireless systems within range of it. Turning off SSID broadcast for your network makes it invisible to your neighbors and passers-by (though it will still be detectible by WLAN "sniffers"). 

 

3) Enable WPA encryption instead of WEP

802.11's WEP (Wired Equivalency Privacy) encryption has well-known weaknesses that make it relatively easy for a determined user with the right equipment to crack the encryption and access the wireless network. A better way to protect your WLAN is with WPA (Wi-Fi Protected Access). WPA provides much better protection and is also easier to use, since your password characters aren't limited to 0-9 and A-F as they are with WEP. WPA support is built into Windows XP (with the latest Service Pack) and virtually all modern wireless hardware and operating systems. A more recent version, WPA2, is found in newer hardware and provides even stronger encryption, but you'll probably need to download an XP patch in order to use it. 

 

4) Remember that WEP is better than nothing 

If you find that some of your wireless devices only support WEP encryption (this is often the case with non-PC devices like media players, PDAs, and DVRs), avoid the temptation to skip encryption entirely because in spite of it's flaws, using WEP is still far superior to having no encryption at all. If you do use WEP, don't use an encryption key that's easy to guess like a string of the same or consecutive numbers. Also, although it can be a pain, WEP users should change encryption keys often-- preferably every week.   See this page if you need help getting WEP to work.

 

5) Use MAC filtering for access control

Unlike IP addresses, MAC addresses are unique to specific network adapters, so by turning on MAC filtering you can limit network access to only your systems (or those you know about). In order to use MAC filtering you need to find (and enter into the router or AP) the 12-character MAC address of every system that will connect to the network, so it can be inconvenient to set up, especially if you have a lot of wireless clients or if your clients change a lot. MAC addresses can be "spoofed" (imitated) by a knowledgeable person, so while it's not a guarantee of security, it does add another hurdle for potential intruders to jump. 

 

6) Reduce your WLAN transmitter power
You won't find this feature on all wireless routers and access points, but some allow you lower the power of your WLAN transmitter and thus reduce the range of the signal. Although it's usually impossible to fine-tune a signal so precisely that it won't leak outside your home or business, with some trial-and-error you can often limit how far outside your premises the signal reaches, minimizing the opportunity for outsiders to access your WLAN. 

 

7) Disable remote administration

Most WLAN routers have the ability to be remotely administered via the Internet. Ideally, you should use this feature only if it lets you define a specific IP address or limited range of addresses that will be able to access the router. Otherwise, almost anyone anywhere could potentially find and access your router. As a rule, unless you absolutely need this capability, it's best to keep remote administration turned off. (It's usually turned off by default, but it's always a good idea to check.)

 

 

What can I do to protect myself?

  • Restrict your online shopping to wired connections.
  • Don’t open programs that contain identifying information while you’re on a wireless network. In fact, don’t keep your social security number, driver’s license number, or bank account numbers anywhere on your computer, period.
  • Keep your computer secure by applying operating system corrective patches when they are released by the software manufacturer and keeping your anti-virus program up to date. Other computers participating in the wireless connection could be infected or compromised and may attempt to spread virus infections or attempt to hack into peer computers attached to the wireless network.
  • Disable file sharing so that others can’t help themselves to files on your computer. For instructions, refer to your operating system help center.

What can iSafety do to protect me?

  • iSatefy can come to your home and setup your home network and encrypted your WI-FI Network, to fends off rogue surfers. 
  • iSafety can educate and inform you on how you can setup and maintain your home network and encrypted your WI-FI Network .