Nellie2

Personal Ramblings on a Security Theme

Entries Comments



Category: tips


Best Practices For 2008 - Linux and other Operating Systems

6 January, 2008 (17:23) | Security, tips | By: Nellie2

This is a fantabulous post from Harry Waldron - wish I’d thought of it!! Here are some of his tips!

On January 1st, a post entitled Best Practices - Internet Safety for 2008 shared concepts related to staying secure. While many of the concepts apply to ANY operating system, some feedback was received that this was mostly Windows oriented. While I agree there’s less malware circulating for open system based OS’s (UNIX, Linux, Solaris, BSD), security is a process that must be employed in ANY environment.

  • Firewall (hardware firewalls are a good choice or you might configure IPtables to set firewall rules)
  • AV protection (while in-the-wild specimens are few and far between, either a real-time or command line scan only) and most of the other list of tools in OP as desired
  • Setup and use more limited non-root user accounts as the primary login area to protect the root environment
  • Keep the kernel and other components up-to-date and keep all other software updated (e.g., Open Office, Firefox, email system, etc)
  • Turn off all programs/services that you don’t plan to use (e.g., SendMail is one popular service often manipulated
  • Install ssh and tcpd (provides more secure and encrypted communications for remote access)

Please read the full post on his blog as he provides some very useful links as well.

Best Practices for 2008 - Linux and other Operating Systems by Harry Waldron

Boom Times for Hi-Tech Criminals

2 January, 2008 (21:45) | Education, Internet, News, tips | By: Nellie2

Just in case you were wondering why there is a big need for all of us to be security concious.. to protect our computers, home networks and data… the BBC published an article today that helps to explain just what is going on out there and why.

Boom Times for Hi-Tech Criminals

Starting a career as a cyber criminal got much easier in 2007.

So say security experts looking back on 12 months in which hi-tech gangs took control of the net’s underground.

The economy supporting these groups has matured so much that now everything from virus-writing kits to spam-spewing zombies are available for rent or hire.

This has helped to fuel, say security professionals, rapid growth in the methods criminals use to catch out PC users and steal saleable data.

As the article explains… it’s all about money. The Hi-Tech criminal can make easy money in a very short space of time.  The article can make scary reading… but remember, ultimately it is YOUR responsibility to secure your computer and data, not Microsoft’s, not your ISP’s and not your friend who lives down the road and knows about computers.

Think about it… you wouldn’t leave your door open so that criminals can wander in and use your phone and car to commit crimes… so why leave your computer wide open?  If you don’t know how to secure it then educate yourself.. it’s not difficult if you know where to look… there are plenty of links on this blog to get you started.

Be careful out there………… but have fun!!!  :)

A Blog Is For Life

23 November, 2007 (19:50) | Internet, News, Security, tips | By: Nellie2

And so is anything else you post online for that matter!! Did you realise that your future could be compromised by your electronic footprint? The UK Information Commisioners Office completed a survey recently… and here are the conclusions.

As many as four and a half million* young people (71%) would not want a college, university or potential employer to conduct an internet search on them unless they could first remove content from social networking sites, according to new research by the Information Commissioner’s Office (ICO).
But almost six in 10 have never considered that what they put online now might be permanent and could be accessed years into the future.

The research findings are unveiled as the ICO launches a new website at www.ico.gov.uk/youngpeople to help young people understand their information rights. The first section contains tips and advice on safe social networking. As well as not thinking ahead before posting information on the web, the survey of Britons aged 14-21** also revealed that youngsters’ online behaviour is a gift to potential fraudsters. Two thirds (eight in 10 girls aged 16-17) accept people they don’t know as ‘friends’ on social networking sites and over half leave parts of their profile public specifically to attract new people. More than seven in 10 are not concerned that their personal profile can be viewed by strangers and 7% don’t think privacy settings are important and actively want everyone to see their full profile.

As for the data that young people make available, 60% post their date of birth, a quarter post their job title and almost one in 10 give their home address. Couple this basic information with details that might be used to create passwords e.g. sibling’s name (posted by 23%) pet’s name (posted by a quarter of girls) and even mother’s maiden name (posted by 2%) and fraudsters have the information they need to obtain products and services in a young person’s name or access existing bank or online accounts.

David Smith, Deputy Commissioner for the ICO, said: “Many young people are posting content online without thinking about the electronic footprint they leave behind. The cost to a person’s future can be very high if something undesirable is found by the increasing number of education institutions and employers using the internet as a tool to vet potential students or employees.

The research also found that a third of young people have never read privacy policies on social networking sites and don’t understand how they can manage their personal information. But when asked how they feel about websites potentially using their details to target advertising at them or to pass on to other websites or brands, a huge 95% are concerned about this, with 54% caring ‘a lot’ about how their personal information is used.

David Smith continues: “This shows that when young people are made aware that their details could be being passed between parties – legitimate or unscrupulous – they are worried. We have to help teenagers wise up to every aspect of the internet age they’re living in – it may be fun but unfortunately it is not the safe space many think it is.”

ICO Top Tips for protecting your identity online 

  • A blog is for life - remember you risk leaving a permanent electronic footprint. If you don’t think you’ll want it to exist somewhere in 10 years time, don’t post it
  • Privacy is precious – choose sites that give you plenty of control over who can find your profile and how much information they can see. Read privacy policies and understand how sites will use your details
  • Personal safety first – don’t allow people to work out your ‘real life’ location e.g. your place and hours of work. Your personal safety offline could be affected by what you tell people online
  • Password protected – change your passwords regularly, don’t use obvious words like your pet’s name and don’t use the same passwords on social networking sites as you do for things like internet banking
  • Address aware – use a separate email address for social networking

Computer Tips and Help For Novices

22 November, 2007 (19:47) | tips | By: Nellie2

This is a good starting point from Chris Pirillo for any user who is new to computers.

Computer Tips and Help For Novices

I like point #5 which tells you to ‘ask questions’.  Remember, no question is a stupid question if you need to know the answer.  I’ve lost count of the number of people who have said that they didn’t like to ask because they felt silly, or it seemed that everyone else knew and they felt real dumb because they didn’t.  My question is… how did everyone else get to know??  They must have asked someone at some point!!

How To Shop Safely Online

10 November, 2007 (16:41) | Internet, Security, tips | By: Nellie2

I was going through my archives as there are some articles that are still relevant and can do with being resurrected from time to time. Here is one of them.

Cyber Monday was originally the first Monday after Thanksgiving weekend… but in this day and age of wider broadband access in the home I suppose Cyber Monday can be any day of the week and any time of the year. Although with Christmas looming…hints and tips on safe online shopping are very relevant. Here is the article that I posted last November.

It seems as if there is another new phrase being coined by our internet usage. Cyber Monday is the busiest on line shopping day of the week it seems. This is mainly because people return to work and put thier companies high speed internet access to work, this may be because they don’t have the internet at home or are on dial up or are just too busy doing family things to have time to browse the net.

Harry Waldron, Microsoft Security MVP has put together a useful page of online shopping safety tips on his blog here;

1. Does your employer permit this? — Hopefully, most employees will recognize that employers have a right to monitor all Internet activities conducted on business equipment. However, some employers permit some personal use during lunch, breaks, or after hours. Users should check IT policies or with their supervisors if they are unsure on corporate usage policies. They should carefully use this business resource and not allow “Cyber Monday” to become grounds for “Layoff Tuesday”

2. Always “Think before you click” — Be careful with email links or URLs returned via a website search. Phishing attacks are disquised sites that look like the real e-commerce site, but they are designed to capture your credit card or account information for fraudulent misuse. These types of sites are abundant and often referenced in spam email. Always go in by the parent site to find products or services. Be careful and avoid clicking on ads in web pages. Remember that a complete stranger on the Internet doesn’t truly want to give you anything. More information on phishing attacks can be found at www.castlecops.com

3. Conduct e-commerce with mainstream sites that use secure server technology. Never shop by email or other untrusted conventions. Research human contact or return policies, so that you can resolve issues quickly.

4. Use a true credit card, rather than a bank debit card as better fraud protection is present

5. Maintain your privacy at all times. Only provide information once you’re certain the information can be trusted. Also ensure your system is free of any malware.

Cyber Monday - Home Page
http://www.cybermonday.com/

Cyber Monday - FAQs
http://www.shop.org/cybermonday/

Stay Safe while shopping online (a few sites found in a quick search)
http://onguardonline.gov/index.html
http://www.bbb.org/alerts/article.asp?ID=153
http://usgovinfo.about.com/od/consumerawareness/l/blonlineshopsaf.htm
http://www.microsoft.com/athome/security/default.mspx
http://usa.visa.com/personal/security/protect_yourself/basics/index.html
http://pittsburgh.about.com/od/shopping/bb/bybshopon.htm
http://www.pcanswer.com/articles/holidaytips2005.htm
http://www.cardwatch.org.uk/

Edit the “Send To” Menu in Vista

21 October, 2007 (19:24) | Vista, tips, windows | By: Nellie2

I love the ‘Send to’ context menu, it’s so handy. Although I do wish notepad was in there by default!

Finding the ‘Send to’ menu folder isn’t easy though. In XP you have to enable viewing of files and folders, then you will the folder in the Application Data folder.

In Vista it’s disappeared all together… well I couldn’t find it!! :( But today I came across a brilliant Vista Tip… and I just had to share it with you.

In Vista, the Send To folder is easily opened by using the Shell command. In the Start Search line of the Start menu, enter “shell:sendto” without the quotation marks. Note that there are no spaces in the command and there is a colon after “shell”. When the SendTo folder opens, you can drop in short cuts for any new folders or programs you wish to add. If you prefer to use the old Run line, the shell command works there also.

Source | Windows Tips and Tricks: Adding functions to the “Send to” menu in Vista