Computer Security: Threats and Solutions

Unfortunately, much of the common sense advice we follow when it comes to Internet security does little to combat the cyber-crime that is rampant. Here is the inside scoop....

When it comes to computer security, many of us live in a bubble of blissful ignorance. We might be vigilant and never open email attachments from people we don't know, we might take care to make sure an ecommerce site is secure before entering our credit card information, or we might even go so far as to install a standard firewall on our computers. Unfortunately, much of the common sense advice we follow when it comes to Internet security does little to combat the cyber-crime that is rampant.

Federal Trade Commission

Even the U.S. Federal Trade Commission, a governmental agency that is designed to help consumers, had to issue a press release stating that "consumers, including corporate and banking executives, appear to be targets of a bogus e-mail supposedly sent by the Federal Trade Commission but actually sent by third parties hoping to install spyware on computers."

There's little doubt that spyware, malware, and insidious virus attacks make any computer with Internet access vulnerable. But, because not all Internet security breaches are immediately apparent, people are often unaware that their seemingly hassle-free computing is anything but. The Federal Trade Commission offers seven guidelines to help consumer surf the Web safely:

1. Protect your personal information. For example, when shopping on an ecommerce site, make sure that the page where you enter your personal information is secure, as designated by "https" before the URL. It's important to stop identity theft before it starts.

2. Know before you click. For instance, many cyber-criminals impersonate legitimate businesses, or send "phishing" email that asks you to click a hyperlink. Check out online merchants and never click on emailed hyperlinks unless you're certain of the source.

3. Update anti-virus, anti-spyware, and firewall software often. Hackers and others who engage in cyber-crime seem to always be a step ahead of the good guys. If your computer protection is outdated, you're vulnerable.

4. Use Web browser and operating system security features. Make sure your browser settings give you optimal privacy and security, and ensure that you update your operating system regularly to take advantage of security patches.

5. Safeguard your passwords. For example, create a unique password for each site you visit, and keep them in a secure place. Use letter, number and symbol combinations that can outsmart automated password detection programs.

6. Always do backups. If your computer does get a virus or a worm, your files may be goners. Make sure to regularly back up any important files and store them in a secure place.

7. Prepare for emergencies. If something does go wrong, such as your computer being hacked or infected, or if you accidentally divulge personal information, know what courses of action you should take to remedy the situation and prevent further problems.

A Hassle-Free Solution

Protecting your computer from all of the threats in cyberspace can seem like full-time job. Thankfully, there are companies who make it their business to offer individuals and businesses the most technologically advanced computer security solutions available. The best of these services offer PC maintenance, full system optimization, problem diagnosis and repair, installation assistance, and a full complement of professionally managed security services. Typically, you pay a small monthly subscription fee and in turn can surf the Web knowing that your computer is locked down and that you'll never again have to stay abreast of the latest security software or lug your computer down to a high-priced repair center.

READ MORE - Computer Security: Threats and Solutions

Online Scams: How To Avoid Getting Fooled

Learn how to avoid the three most popular scams you will run into online without damaging the thrill of surfing the internet.

Beware of the three ways of getting fooled into giving up your money through seemingly innocent money-making schemes. Scams are all around us and it can be found in every single area of life, but more so in such areas where the risk is greater such as when dealing with credit cards, bank accounts and other activities which involve sending or receiving money online.

The Bank/Credit Card Email Scam:
If you get an email asking you to sign up to your bank account or credit card through the email because your privacy is under danger or just to receive a free gift or something: BEWARE! Do not sign up through the internet address provided in the email. If the email does make you anxious, go to the bank or credit card site using the address you know already or through searching the search engines.
How Does This Scam Work?
The senders of the email know that only a very few will sign up but that is all they need. When you signed up to the bogus internet address, they got your user and password. Now its time for them to party!

The Missing Millionaire Scam:
If you receive an email saying that they represent a dead or missing former ruler, high-ranking official or businessman from an African, Gulf or even Russian: BEWARE! They offer you a chance to earn anything between one to five percent of ten to fifty million. And for your co-operation only. Don't get sucked into this, for though they speak of giving you money, they will receive cash and from your account.
How Does This Scam Work?
They will ask you for your bank details in order to transfer the cash and then they will use that to transfer a small amount. Now, once you trust them, they will ask you for more personal and secure details because they "need" that to transfer the entire sum in and out of your account. What they won't tell you is that they will transfer all the money out from your account: theirs and yours.

The Make Money Fast Scam:
This is the most innocent of the lot, but that is also why it is the most dangerous. These are so-called companies that advertise that if you only sign up and use their system, you will mint money. Please do not fall for such schemes. They will pay you some money but then once trust is built, they will fleece your bank account. Remember that quick money scams are the surest and fastest way to lose all your money!

Conclusion:
Whatever you do online, always remember that the internet is not a safe place. Treat it like you would treat any other business venture and bring up your guard. If you play it safe and check out the companies before committing, you will be able to guard yourself against losing money to crooks.

READ MORE - Online Scams: How To Avoid Getting Fooled

My Identity Was Stolen Because Of Someone Else's Mistake

A true story about a financial organization losing my personal financial information - Identity Theft

Giving Total Strangers Your Personal Information
----------------------------
How often would you say you trust total strangers with some of your most confidential information? I think I can answer this question for just about everyone. The answer is, nearly everyday. To illustrate this, I recently made a list of people or organizations that I have provided the following information to;

My social security number;
Birth date;
Tax Identification number;
Bank account numbers;
Medical information;
Checking account number

Just to name the top few forms of personal identification and confidential information. The list of those other than my self that have access to this information is made up of but not limited to the following;

My doctors office;
Banks that have issued me credit cards;
Computer stores (Best Buy, CompUSA, CDW, Circuit City);
Online music purchases through Wal-Mart (Formerly Liquid Audio);
Restaurant staff;
Hospitals;
Medical procedure companies (X-ray's, Ultra-sounds,....
And many more...

Be careful When Giving Your Credit Card Number Over The Phone
--------------------------------------------------
It seems like almost everyday someone is asking me for my social security number. I think most of us just get use to provided this information to various people and companies.

I recently ordered Italian food for dinner from one our favorite local restaurants. Every time I place an order the person taking the phone order repeats, out loud, my credit card information as I provide it to them over the phone. This includes the account number, my name, and expiration date. Every item that someone standing in line waiting to pick up their Pizza needs to purchase anything they wish online with my credit. I know why they do this, to make sure they are getting the right information. However, I finally told the person to please stop repeating this information out load. They were a little confused at first of why I made this request but after explaining to them my concern they said “Wow, I never really thought about that before”. "How in the world can you remember all these things about computers?" Sometimes I wonder this myself.

To share another, more serious experience with you here is something that happened to me in just the last week or so. My wife walked into my office after returning from the mailbox and the first words out of her mouth was “Are you ready for this”. When ever she utters that phrase I know it’s not something pleasant. The letter she was holding was from our mortgage company. A company we have been doing business with for many years. It turns out that approximately 4 months ago a computer they were shipping from one office to another was stolen in transit. This computer contained my mortgage account number, balance, credit lines, social security number, business tax identification number, and much more.

When Should A Company Notify You That Your Personal Information Has Been Stolen?
----------------------------
The letter indicated that they were just notifying me now because law enforcement asked that they not contact any customers at the time the event took place, several months prior to receiving the letter, because it may impact the investigation. Well, they never found the computer or the thief so they decided to start notifying the affected customers. The letter also stated that the stolen computer had two levels of security and that they were not overly concerned that the thief would gain direct access to my information. Being in the computer security business, I thought to myself “Let’s see, two levels of security, well that could be a password to logon to the computer, and Anti-Virus software, or maybe they were using whole disk encryption and some sort of 1024bit pass-phrase to access the system”. Quite frankly, chances are the system was not protected by anything as sophisticated as whole disk encryption. Of course they would not give me this information when I called. They did have a plan of action though to help me. You ready for this, a 1 year free subscription to Equifax (A Credit Reporting Agency) to alert me if someone is using my stolen information. That is about it. Oh, and they would assist me in the event that something showed up on my credit report. It’s nice to see a multi-billion dollar company taking responsibility for the theft of my financial information.
I know I'm not the only person that has these little "moments". My New Years resolution this year was to simplify my life. I'm not embarrassed to say that I've not made much progress yet but I am not going to give up. I am going to bring harmony to my life if it kills me in the process.

I share this information with you for several reasons. First, in the computer security business we are constantly talking about trusted and un-trusted computers and networks. Trusted networks are under a local administrators control and un-trusted networks are under the control of someone else. The same situation exists in real life. I keep safe my personal and private information as much as possible, but there are others that have this information as well. How well do they safe guard this information? I have no idea, but I am forced to trust them. Second, to show you that even security professionals, people like me who tend to be slightly more paranoid then the rest about our private information are just as much at risk as everyone else. Finally, to get you thinking about your confidential and private information, how many people have access to it, and why you need to take more than reasonable steps to keep it confidential?

Conclusion
-----------
Don’t for one minute think that identity theft or fraud can’t happen to you. In fact, I would say that it is not if but when it will happen, at least to one degree or another. Keep your private information confidential as much as possible. When people ask you for this information, ask them why they need it and how they plan to keep it secure. Also, keep track of who you give this information and for what reason. Finally, monitor your credit report frequently. Trans Union, Equifax, and Experian, the three largest credit reporting agencies, now offer inexpensive monthly services that can provide you with important information that could alert you to various forms of electronic fraud.

You may reprint or publish this article free of charge as long as the bylines are included.

Original URL (The Web version of the article)
------------
http://www.defendingthenet.com/NewsLetters/MyIdentityWasStolenBecauseOfSomeoneElsesMistake.htm

READ MORE - My Identity Was Stolen Because Of Someone Else's Mistake

Has Someone Stolen Your Identity? Here Are 8 Ways to Tell

Mail is missing, money is disappearing from your bank account.  Is it possible that someone has stolen your identity?  Inside this article you'll find 8 tips to identify if someone has done just that.


Right now, someone could be using your identity to start a new credit card, to get a loan, to drain your checking or savings account.  In some cases, you might not find out about the theft for weeks, sometimes even months.  Unfortunately, the longer it takes to discover the crime, the more damage will be done and the harder it will be to rectify that damage.

Thankfully, there are some ways for you to detect identity theft before the problems progress too far.  Below are some of those methods.

1.    Errors on your credit report – By checking your credit report yearly, you'll be able to determine if anyone is opening up accounts in your name without your permission. Otherwise, you may not learn there is a problem until you need to take out credit.

2.    Mail problems – One of the least-technological ways to commit identity theft is stealing mail.  If you aren't receiving mail or if you aren't getting items in the mail that you are expecting, such as credit card bills, then you may be a victim of identity theft.

3.    Being rejected for credit you didn't request – As you may already know, if a creditor rejects your request for credit, he or she must send you a letter in the mail explaining the reason for the rejection.  If you begin getting these letters, but you haven't been requesting credit, then that's a good sign someone is using your identity.

4.    Being the victim of pretexting – Pretexting is a scheme involving the Internet or the telephone.  Someone contacts you claiming to be a legitimate organization's representative, then they'll ask for your personal information, possibly a PIN number or a checking account number.  If that has happened to you and you've given out that information, then there's a good chance you'll be a victim in the near future.

5.    Changes in your credit balances or checking account amounts – Unexplained changes in any of your financial accounts should be a big signal to you that something is not right.  That's why it's a good idea to check all of your balances weekly and compare them to your estimates.  As soon as you spot a discrepancy, you need to follow up with your financial institution.

6.    Being denied credit – Sadly, some people don't discover they have been identity theft victims until they go to buy a car, get a second mortgage, or open a new credit card.  If you thought you had good credit but are getting denied, then it's a good time to check your credit reports, even if you've already done your yearly check.

7.    Being contacted by debt collectors – When you start getting calls or letters about unpaid debts, which you don't recall having, you should never automatically pay them. Instead, send a written request for more information about the debt.  By law, the creditor must supply you with this information.

8.    Having some types of spyware on your computer – While not all spyware leads to identity theft, you need to realize that it can pose a serious threat to your privacy.  Your passwords, credit card information, and online activities could have been monitored by unknown third parties, which leave you vulnerable to an attack.

READ MORE - Has Someone Stolen Your Identity? Here Are 8 Ways to Tell

Document Shredders And Their Features

Why should I get a document shredder? How much should I spend on a document shredder? What features are available and what is the best document shredder for my type of business? These are some of the questions I will answer for you in this article.

First, why should I have a document shredder for my business or for my own personal use? The answer is easy. Every day more crime relating to stolen or found documents is occurring. Fraud, Identity Theft, Corporate Espionage, Co...
Why should I get a document shredder? How much should I spend on a document shredder? What features are available and what is the best document shredder for my type of business? These are some of the questions I will answer for you in this article.

First, why should I have a document shredder for my business or for my own personal use? The answer is easy. Every day more crime relating to stolen or found documents is occurring. Fraud, Identity Theft, Corporate Espionage, Con Games, and Forgery are some of the examples of crime that can happen to anyone, any time.

The information contained in your documents may not seem like the stuff in spy movies, but the threat to you individually as well as to your business exists. Your documents contain a lot of things you take for granted. Sensitive information about upcoming plans, stock options, and other business related material can be a bonus to thieves. Thieves, to steal your identity, can use your personal information like mother’s maiden name, social security number, credit card and pin numbers, birth date and more.

There are many reasons why document security is important. There are other aspects to document security that are important as well, but in this article we will remain on the topic of document shredding.

How much you should spend on a document shredder depends on your business. How many documents you need to shred daily, the size of the documents your business uses, how sensitive the information in the documents is, and more are factors to consider when choosing a document shredder. That little desk model document shredder that you saw at the office supply store might not be adequate to your needs.

The DOD, (Department of Defense), has standards for the destruction of sensitive documents. This is the top of line for document shredders and probably a bit much for your business. I include this information to show you the wide range of document shredders that are available for your own document security.

The largest of these that shreds a high volume of documents into very tiny pieces can run upwards of $20,000. The small ones you see at your office supply store can run as low as $30.

One of the features that create this disparity in cost is durability. How many documents can it shred before needing maintenance or a replacement. One made of plastic parts will not last under heavy use, while one made of durable metal will. Obviously, if your company does not shred but a couple of documents per day, a cheaper document shredder might work for you.

How secure are the documents you will be shredding. Some document shredders only cut the document into strips of varying width, depending on the document shredder you choose. High-tech thieves can piece together uniformly shredded documents. If the information is worthwhile to them, they can retrieve it. If your company really wants to destroy sensitive documents, you need to consider a document shredder that cuts the paper up into bits, rather than just strips. These document shredders are more expensive, but a lot more secure.

Also, some of the better shredders not only shred paper documents, but also CDs, Plastic Film, Key Tape, ID Cards, Video Tapes, Floppy Discs, Microfiche and other classified media. If your company also has sensitive material stored on these other forms of media, you may want to purchase a document shredder that does more.

Dust creation is another factor, especially for those who are shredding a high volume of documents and other material. Some document shredders have an internal vacuum to dispose of dust, so if your business does a high volume of document shredding, you may want to ask about this feature.

Noise is another factor to consider with any size shredder that you plan to purchase. Try before you buy is a good thing to keep in mind. If it is noisy, you will be happy you tried it out before you started using it in your office.

How difficult is it to clear paper jams? How safe is it? Is it easy to put your fingers into the area where the blades are? How easy is it to take apart and clean? These and more are questions you should consider when choosing the document shredder your business will be using.

READ MORE - Document Shredders And Their Features

Another Fine Mess!

I'm in the Anti-Spyware business, and I'm doing a lot of advertising to promote my website, but here I am online and on the phone, giving my personal information to.....who? Strangers basically, Geez!.
I was reading an excellent article today titled “Identity Theft” by Judith Collins at eWeek.com, when it got me to thinking.... I'm in the Anti-Spyware business, and I'm doing a lot of advertising to promote my website, but here I am online and on the phone, giving my personal information to.....who? Strangers basically, Geez!.

The majority of identity thefts occur thru contractors employing people in entry-level jobs that have not been properly screened. Not even Hackers,Phishers or Dumpster Divers account for as many! The ideal location for a Identity stealer would be in a out sourced agency that fails to use adequate screening processes.

I've read many articles lately that state we need stricter guidelines and procedures to insure we have proper security as consumers. A set of universal rules that would be adhered to by all. To even think of the enormous complexity of this project staggers the mind!

So here I am, I want to take a advertisement out at a prestigious magazine that is published in a traditional print paper and online. I may have to deal with people online and on the phone.I give my name, address, phone number, and……my credit card number! EGAD, what am I doing?

Then my common sense and education about matters such as these kicks in and I rationalize that these companies would not be in business if they couldn’t keep their customers happy. But,accidents happen.

So you see my dilemma. I know computer security and Spyware, and the vulnerabilities and strengths when dealing online. Its just a little new to me to trust, when I know the ramifications to me personally if my Identity were to be used for ill-gotten gain.

I know after all these years of being a, OK I admit it, a slightly paranoid online user, that I need to make myself a little vunerable so I can better succeed in my online business.

Ive been where the people who contact me asking for help are; a place in their minds of anger, frustration and helplessness.

But then as I said earlier, common sense and education about Spyware wins over and I take a deep breath and go on.

The California Attorney General has a excellent website for Identity Theft at
http://caag.state.ca.us/idtheft/

READ MORE - Another Fine Mess!