The recent attack on US security think tank Stratfor is a bit scary. A company like this that with clients like the US Air Force, Apple Inc., and the Miami Police Department should be secure right? And if they can get hacked, then anybody can get hacked right? So the thought for this post is: Just how secure are we?
Well, if the truth be told, there is no perfectly secure system. Any computer system can be hacked. With enough people and enough time a hacker can get in. With that said, the possibility of being hacked is way different than the probability of being hacked. Think about the possibility and probability of being struck by lightning. It’s definately possible to be struck by lightning…but it’s not very probable. Odds are 300,000 to 1 that a bolt of lightning will strike you, and if you take proper precautions (like not golfing during a lightning storm) you can make it less likely to happen.
Stratfor is a huge company…which makes it a huge target. The weakest link of any computer system is the human element. It’s possible that someone on the inside let hackers in. Maybe intentionally…maybe accidentally. You as an individual are not as an attractive target. you’re a nameless face in the sea of billions, and unless a hacker specifically knows you, they would not know to look for you….or where to look for you.
Below are a few tips to keep you more secure on the internet:
1. Don’t open attachments. It’s easy to fake an email that appears to come from someone you know. The address line might say…”Check out this cool video” “Hey friend, can you review this document for me.” etc. This is a major way viruses and trojans are spread.
2. Don’t trust files you download from the internet. Scan everything. If your antivirus program doesn’t automatically scan it, then right click on the file before running, and scan it.
3. Make sure you keep your antivirus up to date. New viruses are created daily, so new virus protection is needed daily. Update your antivirus at least monthly.
4. Make sure you keep your operating system up to date. Most do this automatically, but this is an important step. Also try to stay current on the version of operating system. For example Windows 95, 98, and 2000 are no longer supported. Support for XP will end in 2014. You don’t need the latest greatest, but do make sure you are running a version that is supported.
5. Only shop at well known online stores. Places like walmart.com, amazon.com, and dell.com are very well known, and are trustworthy places to shop. If you’ve never heard of a website or company on the web…just go somewhere else. I can create a website that looks legitimate, and take your credit card numbers.
6. Make sure the website address is correct before trying to log in. There are lookalike websites out there. The page may look identical to walmart, but if the address doesn’t say “http://www.walmart.com/” then it’s not walmart. The best way to navigate to a site is to save it in your favorites. That way you know you’re going to the same website. It’s dangerous to follow links to websites in emails. The link may look correct when you click on it, but the page you go to might have a different web address.
7. When you are using credit cards, make sure the site has a padlock in the browser address bar or it the address starts with https:// The s means the info you send is encrypted from your computer all the way to the host computer. If the address just has http:// then the info you send is just plain text, and any person watching network traffic can grab those numbers.
8. Make sure you use good passwords. Like I said before the weakest link in any system is the human element…specifically poorly formed passwords. Most people use passwords that they will remember well…something like a pet’s name, or their grandson’s name, or thier favorite sports team. These are easy passwords to figure out. It’s more secure to use a password that is 8 characters long or longer. Make some of the characters digits, and make some of them in upper and lower case. Here’s an example of a weak password: fluffy98 This is their pet’s name followed by the year they graduated. Here is an example of a more secure password: Purple7Cow If possible use a pass phrase rather than a password.
9. Change your passwords on occation. The longer you keep a password, the more likely someone will find it and use it. I know it’s a hassle, but it will make things more secure. Many companies force you to change your password every three months.
10. Don’t give your personal info out over the phone. Hackers sometimes use a technique called Phishing where they call people pretending to be someone else just to gather information. For example Discover card calls and says, “Hey just wanted to let you know there was an attempt by hackers to access your account, can you give me your log in and password so that I can secure your account.” A company will NEVER ask you for account login information.