Think your PC is safe online? Think again

[rapier57]

Originally posted here by Paws
I would love to teach basic computer security to people who know nothing about it and need some guidance, just got to get the piece of paper which will allow me to teach.

Hey, Paws! Sorry to jump into this so late, but I just had to add something. Teaching is fun, but you don't necessarily have to have a degree or certificate. In the US, we have Adult Education day and evening classes, usually offered through a local community college, YMCA, or civic community programs. The instructors/teachers in these programs are often local volunteers or "experts," and you don't have to have a teaching certificate. Design a program that can be done in about four to five weeks, one night a week for three hours and propose it to your local program. You might even get paid something for it. I know our local community colleges pay well for adult education instructors, especially when the programs are successful and well attended.

I'm sure the UK and other countries have similar programs. If you want to have an impact on the adults who are buying the unsecured systems, this is probably one of the best venues from which to reach them.

[thehorse13]

Hey Horse,

I couldn't dissagree that these big companies have a vested interest in talking up these risks if they are about to release security products. But I would agree with it's findings and that they are possibly on the conservative side.

Most (but not all) computer owners know that they need AV, but they thing that just by having AV that is enough. Updates/patches etc are another matter...'Too Technical'.

Spyware is still a mystery to most. If IE has popups then it is IE that is faulty.

Just like Nihil said, a lot of users just see a PC as another type of 'white goods'.

I'm not debating this, read my comments again. I could care less about end users. My beef is with companies using FUD to boost subscriptions to their services. Case in point, AOL.

[rapier57]

In keeping with the attempt to provide some education or awareness, I'm going to share something I recently sent out to our staff. Even if you can't get into adult education or teach, you can affect your fellow workers or people you are in contact with on a daily basis. It can't hurts. I send this kind of thing around on a regular basis to keep people thinking and--I hope--taking action to secure and prevent.

At this time of year, there is a lot of consumer activity in the stores, malls and on-line retailers. Unfortunately, too much of that activity is fraudulent and the result of identity theft. Thieves steal identities by taking mail from mailboxes, dumpster diving for sensitive information inadvertently thrown out, through on-line scams and phoney email pitches, and--increasingly--by exploiting inadequately protected home computers.

Some spyware is designed to harvest personal information, bank accounts, user IDs and passwords from personal computers. Some email (called phishing) claims to be from your bank, lending institution, credit union or other financial agency and wants you to confirm your account information, when they are really just conning you into giving up your information for criminal purposes. The sad part of this is, it is such a pernicious threat to all of us because it works. People don't adequately protect home computer systems, and they respond all too often to phishing email.

Two things:

1. Always check with your financial institution before responding to any on-line or email communication purporting to be from that institution. Use the phone number in the phone book, not in the email or web site. Don't immediately delete the email, but be prepared to forward it. Never respond directly to these emails or click on the links in them until you have checked with your financial institution.

2. Protect your home computer.

Put a password on your login, which should not be the administrator but the limited user.

Use a good, updated and current anti-virus program, set it to auto-update and to automatically scan.
A sampling of commercial anti-virus products:
Norton Anti-Virus -- http://www.symantec.com/product/
McAfee Anti-Virus -- http://www.mcafee.com/us/

A sampling of free Anti-Virus products:
AVG -- http://free.grisoft.com/doc/1
Avast -- http://www.avast.com/
Ewido -- http://www.ewido.net/en/download/

Use a good anti-spyware program (or more than one) and scan frequently.
A sampling of free, reliable anti-spyware products:
SpyBot -- http://www.safer-networking.org/en/download/
Microsoft Anti-spyware -- http://www.microsoft.com/athome/secu...e/default.mspx
Adaware SE -- http://www.lavasoftusa.com/software/adaware/
Ewido -- http://www.ewido.net/en/download/

Make sure your operating system is current and up to date for patches and updates.
Windows Update -- http://update.microsoft.com/microsof...6/default.aspx

Use a firewall, either the one that came with the operating system (Windows, Linux and Apple OSX all have them), a personal firewall you bought or downloaded from a reputable source, or a hardware firewall in the cable/DSL router, if available.

A sampline of free personal firewalls:
ZoneAlarm -- http://www.zonealarm.com/
Kerio -- http://www.kerio.com/kpf_download.html (under acquisition, may be discontinued)
Sygate -- http://smb.sygate.com/products/spf_standard.htm

You are free to use this, or modify for your purposes, as you see fit.

[g3neration]

I dont want to sound like an a$$ but not too many people actually care about security nor do they want to. Its kind of like me flying in an airplane. I dont know diddly about airplanes nor do I really want too. If someone goes wrong, doesnt matter what, I dont really care why I just want it resolved. Same with security, most people dont care why nor do they want to. So I wouldnt expect to much.

About half did not have a properly-configured firewall

Umm how about no firewall? Is that still properly configured? I guess that statement kind of answers part of my question from my other post. Some sort of firewall should be installed on a system.

[catch]

This garbage really bugs me... people seem to have lost all sense of what is what these days

Is this valid information or advertisement?
Is intelligent design religion or science?
Is Fox News reporting or editorializing?

Don't trust anything that has money behind it... ever, ever, ever.

You want to read about computer security, stick to Military and academic papers. You'll find they are far more honest. The former because it needs to just work, the latter because tere is no motive beyond the good grade.

There are lots of people who don't really know much about computer security

Like the people who wrote the report, the person who wrote the article on the report, and now you who posted the article here.

I would love to teach basic computer security to people who know nothing about it and need some guidance

So you can act as Mary Kay-style representative for lame firewall, AV, and AS systems? How many Zone Alarm installations until you get your pink car?

This is verrrrry interesting. Funny how this comes out right about when AOL is hucking their new and improved security features in their software. Even more interesting, it aligns perfectly with all the commercials I see on TV.

A-****ing-men! Someone actually read who paid for this study and what else they are paying for.

Most (but not all) computer owners know that they need AV, but they thing that just by having AV that is enough. Updates/patches etc are another matter...'Too Technical'.

Do you know how to tell is a solution is bad? If it exists in a finite space, yet can become flawed without modification of this finite space.

Umm how about no firewall? Is that still properly configured? I guess that statement kind of answers part of my question from my other post. Some sort of firewall should be installed on a system.

*SLAP*

catch

999 - One post left.

[Computernerd22]

Don't trust anything that has money behind it... ever, ever, ever.

Nothing like stating the obvious, huh catch?

There are lots of people who don't really know much about computer security

Catch replies with

and now you who posted the article here.

What an *******! Hey snatch (another name for a pu$$ÿ) you really shouldn't practice "security by obscurity," that is, don't assume that users are stupid. Some of us are smarter than your assumptions.

[The Duck]

Staying on topic...

I agree with the fact that most people think that because this game works, or they can view that website, or they can run this program with few problems then their fine. They say they really don't need to care about security because they don't shop online and bla bla bla...

Because these users seem to be the majority I usually clean their system and install AV, firewall, and anti malware programs and I show them how to update and scan. They look at me as if I asked them to do rocket science . They also question me why they have to spent so much time updating and scanning, I tell them it really doesn't take THAT much time and they can either do this or spend hours trying to save their information from a virus or worm... I also stress backing up your computer, but that's usually asking to much of them ...

[jinxy]

Some of us are smarter than your assumptions.

For some one who has, "frustrated
Reason: PC won't boot!"

As their, "Mood"........................................................I have to ask, "exactly how smart do you think you are"?

[Computernerd22]

For some one who has, "frustrated
Reason: PC won't boot!"

As their, "Mood"........................................................I have to ask, "exactly how smart do you think you are"?

Ummm, PC wont boot because the power supply is shot. Won't be fixed until new power supply comes in. Hey Jinxy, maybe you should find another way to be a dickhead.

[morganlefay]

I think the point catch and thehorse and I am trying to make here....

Is you should pay attention to who wrote\sponsored the article.......maybe read it befaore you post your link

and that some of the stats may be...........mmmmm.......... biased , to say the least.

I have seen\heard alot of this lately......with people spouting off about security..when they really have no idea of what they are talking about.

I have vendors calling me all the time with some new fangdangled thingymabob....and the sales person has no clue on what he\she is talking about...reading from some script.

As I said before.....its all FUD.

Off topic.....

calling members names has no place in a security discussion.... there are valid points being made on both sides.......its a discussion...different views are brought in to it.........you dont have to agree.....but you can take some time and ponder what is being said

I am kinda getting sick of the 12 year old mentality I have seen on AO lately


They neg threads with this type of comment

then f#ck off! (edited by mlf)

Geez..........

MLF