Think your PC is safe online? Think again

There are lots of people who don't really know much about computer security, maybe they don't have the time to learn, or think it's too complicated, or maybe they just can't be bothered. That's why the following article did not surprise me one bit. Still an interesting read though.

Quote:

---

Think your PC is safe online? Think again.

Study finds 81 percent of home PCs don't have basic security software

By Bob Sullivan
Technology correspondent
MSNBC
Updated: 8:32 p.m. ET Dec. 7, 2005

WASHINGTON - While most Internet users think they are safe online, they're not, according to a new study released Wednesday by America Online and the National Cyber Security Alliance.
In fact, about 80 percent are exposed to common Internet threats, the study found.

More than half of the participants either had no anti-virus protection or had not updated it within the last week, researchers found. About half did not have a properly-configured firewall, and four in ten didn't have spyware protection. Taken collectively, more than 4 in five consumers lacked at least one of the three types of basic protection.

Still, 83 percent told researchers they were "safe from online threats," the study found.

---

Think your PC is safe online? Think again

The basic problem is that people go and buy a PC in the same way as they would buy a microwave or a hair dryer. The actually do not understand that there is a problem or issue regarding security.

As long as it works, they think that it is OK?

:)

Quote:

---

Originally posted here by nihil
The basic problem is that people go and buy a PC in the same way as they would buy a microwave or a hair dryer. The actually do not understand that there is a problem or issue regarding security.

As long as it works, they think that it is OK?

:)

---

I completely agree nihil. If you buy a pc and something goes wrong such as a virus attacking it, then it must be the fault of the computer manufacturer. I would love to teach basic computer security to people who know nothing about it and need some guidance, just got to get the piece of paper which will allow me to teach. :D

Hi paws,

Quote:

---

I would love to teach basic computer security

---

That's maybe a better idea than you think.
I used to run a little home business after hours doing basic PC repairs. It was almost 90% spyware/virus removal. I used to spend more time explaining everything than fixing the machines.

Made me a little bit of money but it made a long working day. If I hadn't made the move from support to Infosec I might have gone for it fulltime.

Quote:

---

just got to get the piece of paper which will allow me to teach.

---

Are you studying right now?

Quote:

---

Originally posted here by Aspman
Hi paws,



That's maybe a better idea than you think.
I used to run a little home business after hours doing basic PC repairs. It was almost 90% spyware/virus removal. I used to spend more time explaining everything than fixing the machines.

Made me a little bit of money but it made a long working day. If I hadn't made the move from support to Infosec I might have gone for it fulltime.



Are you studying right now?

---

Hi Aspman :)

Yes I am, taking my Java exam in March, then I will be studying for the teaching certificate and then finally will get my CS Degree. In between all of that I am teaching myself as much as I can about computer security, it's busy but very enjoyable.

I would do the basic PC repairs as I do know quite a bit, and have fixed friends pc's, but at the moment there are quite a few people where I live already doing that. However, I will feel more confident doing that when I have the certificate! :D

Quote:

---

think it's too complicated, or maybe they just can't be bothered

---

This pretty much sums up 2 of the demographics which I see all the time with problem PC's the... think it's too complicated group... are the middle aged to senior's, mostly people taking up PC's for the first time.(have to know what the kids are doing online all the time... :eek: ), the other group I have found to be late teens to mid twenty's "Gamers", as long as their games are playable they could care less about "updates, patches etc." But when it is infected, they are soon running to the forums for help,......... which is a positive as opposed to those that don't realise they may have a "zombie" for a PC, and merrily go on their way.

Good Luck on your exam's ;)

Quote:

---

WASHINGTON - While most Internet users think they are safe online, they're not, according to a new study released Wednesday by America Online and the National Cyber Security Alliance.
In fact, about 80 percent are exposed to common Internet threats, the study found.

---

This is verrrrry interesting. Funny how this comes out right about when AOL is hucking their new and improved security features in their software. Even more interesting, it aligns perfectly with all the commercials I see on TV.

FUD anyone?

This is about as funny as ZDNet saying that CA and Symantec make the best personal firewalls in a recent article. Interesting how those two companies are huge contributors. Can anyone say, "NO credibility??!!"

I see AOL as the Gartner of ISPs.

--TH13

Quote:

---

the other group I have found to be late teens to mid twenty's "Gamers", as long as their games are playable they could care less about "updates, patches etc."

---

LOL god damn this is a funny statement for me. Not because i think its wrong or anything but this used to be me.

I am gamer, been addicted to FFXI for . . . . well too long. Originally i did think that as long as my game worked i don't care. Well **** finally got bad enough on my box where my game stopped working, and a buddy of mine is a member of this site, so he reffered me to you guys. Came in, got my **** fixed, and now i can't leave AO. It has definatly made me a lot more aware about pc securities and i no longer only care if my game is working. AO saved my box.

Hey Horse,

I couldn't dissagree that these big companies have a vested interest in talking up these risks if they are about to release security products. But I would agree with it's findings and that they are possibly on the conservative side.

Most (but not all) computer owners know that they need AV, but they thing that just by having AV that is enough. Updates/patches etc are another matter...'Too Technical'.

Spyware is still a mystery to most. If IE has popups then it is IE that is faulty.

Just like Nihil said, a lot of users just see a PC as another type of 'white goods'.

Its all FUD..... :rolleyes:

http://www.eweek.com/article2/0,1895...05dtx1k0000599


Vendors creating the scare...then offering the fix??

and I totally agree that the average user treats thier computer like the fridge....but there also appears to be huge misinformation out there....

MLF

Quote:

---

Originally posted here by Paws
I would love to teach basic computer security to people who know nothing about it and need some guidance, just got to get the piece of paper which will allow me to teach. :D

---

Hey, Paws! Sorry to jump into this so late, but I just had to add something. Teaching is fun, but you don't necessarily have to have a degree or certificate. In the US, we have Adult Education day and evening classes, usually offered through a local community college, YMCA, or civic community programs. The instructors/teachers in these programs are often local volunteers or "experts," and you don't have to have a teaching certificate. Design a program that can be done in about four to five weeks, one night a week for three hours and propose it to your local program. You might even get paid something for it. I know our local community colleges pay well for adult education instructors, especially when the programs are successful and well attended.

I'm sure the UK and other countries have similar programs. If you want to have an impact on the adults who are buying the unsecured systems, this is probably one of the best venues from which to reach them.

Quote:

---

Hey Horse,

I couldn't dissagree that these big companies have a vested interest in talking up these risks if they are about to release security products. But I would agree with it's findings and that they are possibly on the conservative side.

Most (but not all) computer owners know that they need AV, but they thing that just by having AV that is enough. Updates/patches etc are another matter...'Too Technical'.

Spyware is still a mystery to most. If IE has popups then it is IE that is faulty.

Just like Nihil said, a lot of users just see a PC as another type of 'white goods'.

---

I'm not debating this, read my comments again. I could care less about end users. My beef is with companies using FUD to boost subscriptions to their services. Case in point, AOL.

;)

In keeping with the attempt to provide some education or awareness, I'm going to share something I recently sent out to our staff. Even if you can't get into adult education or teach, you can affect your fellow workers or people you are in contact with on a daily basis. It can't hurts. I send this kind of thing around on a regular basis to keep people thinking and--I hope--taking action to secure and prevent.

Quote:

---

At this time of year, there is a lot of consumer activity in the stores, malls and on-line retailers. Unfortunately, too much of that activity is fraudulent and the result of identity theft. Thieves steal identities by taking mail from mailboxes, dumpster diving for sensitive information inadvertently thrown out, through on-line scams and phoney email pitches, and--increasingly--by exploiting inadequately protected home computers.

Some spyware is designed to harvest personal information, bank accounts, user IDs and passwords from personal computers. Some email (called phishing) claims to be from your bank, lending institution, credit union or other financial agency and wants you to confirm your account information, when they are really just conning you into giving up your information for criminal purposes. The sad part of this is, it is such a pernicious threat to all of us because it works. People don't adequately protect home computer systems, and they respond all too often to phishing email.

Two things:

1. Always check with your financial institution before responding to any on-line or email communication purporting to be from that institution. Use the phone number in the phone book, not in the email or web site. Don't immediately delete the email, but be prepared to forward it. Never respond directly to these emails or click on the links in them until you have checked with your financial institution.

2. Protect your home computer.

Put a password on your login, which should not be the administrator but the limited user.

Use a good, updated and current anti-virus program, set it to auto-update and to automatically scan.
A sampling of commercial anti-virus products:
Norton Anti-Virus -- http://www.symantec.com/product/
McAfee Anti-Virus -- http://www.mcafee.com/us/

A sampling of free Anti-Virus products:
AVG -- http://free.grisoft.com/doc/1
Avast -- http://www.avast.com/
Ewido -- http://www.ewido.net/en/download/

Use a good anti-spyware program (or more than one) and scan frequently.
A sampling of free, reliable anti-spyware products:
SpyBot -- http://www.safer-networking.org/en/download/
Microsoft Anti-spyware -- http://www.microsoft.com/athome/secu...e/default.mspx
Adaware SE -- http://www.lavasoftusa.com/software/adaware/
Ewido -- http://www.ewido.net/en/download/

Make sure your operating system is current and up to date for patches and updates.
Windows Update -- http://update.microsoft.com/microsof...6/default.aspx

Use a firewall, either the one that came with the operating system (Windows, Linux and Apple OSX all have them), a personal firewall you bought or downloaded from a reputable source, or a hardware firewall in the cable/DSL router, if available.

A sampline of free personal firewalls:
ZoneAlarm -- http://www.zonealarm.com/
Kerio -- http://www.kerio.com/kpf_download.html (under acquisition, may be discontinued)
Sygate -- http://smb.sygate.com/products/spf_standard.htm

---

You are free to use this, or modify for your purposes, as you see fit.

:)

I dont want to sound like an a$$ but not too many people actually care about security nor do they want to. Its kind of like me flying in an airplane. I dont know diddly about airplanes nor do I really want too. If someone goes wrong, doesnt matter what, I dont really care why I just want it resolved. Same with security, most people dont care why nor do they want to. So I wouldnt expect to much. :p

Quote:

---

About half did not have a properly-configured firewall

---

Umm how about no firewall? Is that still properly configured? :D I guess that statement kind of answers part of my question from my other post. :p Some sort of firewall should be installed on a system.

This garbage really bugs me... people seem to have lost all sense of what is what these days

Is this valid information or advertisement?
Is intelligent design religion or science?
Is Fox News reporting or editorializing?

Don't trust anything that has money behind it... ever, ever, ever.

You want to read about computer security, stick to Military and academic papers. You'll find they are far more honest. The former because it needs to just work, the latter because tere is no motive beyond the good grade.

Quote:

---

There are lots of people who don't really know much about computer security

---

Like the people who wrote the report, the person who wrote the article on the report, and now you who posted the article here.

Quote:

---

I would love to teach basic computer security to people who know nothing about it and need some guidance

---

So you can act as Mary Kay-style representative for lame firewall, AV, and AS systems? How many Zone Alarm installations until you get your pink car?

Quote:

---

This is verrrrry interesting. Funny how this comes out right about when AOL is hucking their new and improved security features in their software. Even more interesting, it aligns perfectly with all the commercials I see on TV.

---

A-****ing-men! Someone actually read who paid for this study and what else they are paying for.

Quote:

---

Most (but not all) computer owners know that they need AV, but they thing that just by having AV that is enough. Updates/patches etc are another matter...'Too Technical'.

---

Do you know how to tell is a solution is bad? If it exists in a finite space, yet can become flawed without modification of this finite space.

Quote:

---

Umm how about no firewall? Is that still properly configured? I guess that statement kind of answers part of my question from my other post. Some sort of firewall should be installed on a system.

---

*SLAP*

catch

999 - One post left. ;)

Quote:

---

Don't trust anything that has money behind it... ever, ever, ever.

---

Nothing like stating the obvious, huh catch?

Quote:

---

There are lots of people who don't really know much about computer security

---

Catch replies with

Quote:

---

and now you who posted the article here.

---

What an *******! Hey snatch (another name for a pu$$ÿ) you really shouldn't practice "security by obscurity," that is, don't assume that users are stupid. Some of us are smarter than your assumptions.

Staying on topic...

I agree with the fact that most people think that because this game works, or they can view that website, or they can run this program with few problems then their fine. They say they really don't need to care about security because they don't shop online and bla bla bla...

Because these users seem to be the majority I usually clean their system and install AV, firewall, and anti malware programs and I show them how to update and scan. They look at me as if I asked them to do rocket science :rolleyes:. They also question me why they have to spent so much time updating and scanning, I tell them it really doesn't take THAT much time and they can either do this or spend hours trying to save their information from a virus or worm... I also stress backing up your computer, but that's usually asking to much of them :rolleyes:...

Quote:

---

Some of us are smarter than your assumptions.

---

For some one who has, "frustrated
Reason: PC won't boot!"

As their, "Mood"........................................................I have to ask, "exactly how smart do you think you are"?

Quote:

---

For some one who has, "frustrated
Reason: PC won't boot!"

As their, "Mood"........................................................I have to ask, "exactly how smart do you think you are"?

---

Ummm, PC wont boot because the power supply is shot. Won't be fixed until new power supply comes in. Hey Jinxy, maybe you should find another way to be a dickhead. ;)

I think the point catch and thehorse and I am trying to make here....

Is you should pay attention to who wrote\sponsored the article.......maybe read it befaore you post your link ;)

and that some of the stats may be...........mmmmm.......... biased , to say the least.

I have seen\heard alot of this lately......with people spouting off about security..when they really have no idea of what they are talking about.

I have vendors calling me all the time with some new fangdangled thingymabob....and the sales person has no clue on what he\she is talking about...reading from some script.

As I said before.....its all FUD. ;)

Off topic.....

calling members names has no place in a security discussion.... there are valid points being made on both sides.......its a discussion...different views are brought in to it.........you dont have to agree.....but you can take some time and ponder what is being said

I am kinda getting sick of the 12 year old mentality I have seen on AO lately
:mad:

They neg threads with this type of comment

Quote:

---

then f#ck off! (edited by mlf)

---

Geez..........

MLF

My Mom and Dad just got online within the last few months. My Dad, already recognizing he was a noob - he even said he was, understood the situation from the getgo after watching the news and hearing people talk about computers in general - as soon as you become connected to a network of any kind - you are vulnerable. It has already been mentioned before, that most users treat their online devices as another appliance, but these appliance need continual updates and maintenance; unlike the toaster which always seems to build up a bed of "toaster leavin's"

I will be prepping my mother-in-law to go online during the holidays - and once I break through the "I'm too stupid to learn this confounded thang" mentality that she has right now - she and my father-in-law will be getting regular lectures on protecting their pc. I saw it also mentioned throughout the thread that teaching users should be going on. Should that be our responsibility to the community, and to quote the movie "Judge Dredd", "Take the law to those who know it not!" ?!? It would not have to be completely altruistic, I love capitalism as much as the next greedy bastage, but should those who know at least something of security and those deemed experts, be enlightening the masses?

Quote:

---

but should those who know at least something of security and those deemed experts, be enlightening the masses?

---

I though that was the point of AO? :p

Quote:

---

I though that was the point of AO?

---

Wakka-wakka! Yes that is the point of AO - but people in this community tend to be more enlightened than most about security, and I think a majority of the users the study information is referring to do not know really anything about computer security. If they do know and just don't take action, well then they need a beating about the head and shoulders.

genXer:
first off i like your signature, good quote
second, im not sure im following your logic

Quote:

---

but should those who know at least something of security and those deemed experts, be enlightening the masses?

---

Quote:

---

Yes that is the point of AO - but people in this community tend to be more enlightened than most about security, and I think a majority of the users the study information is referring to do not know really anything about computer security.

---

did you think that the people the article were talking about would be the ones educating?

in reference to

Quote:

---

a majority of the users the study information is referring to do not know really anything about computer security

---

, i agree, this is quite true. my grandparents would fall under this category. ive gone over to their house quite a few times to remove spyware and viri and basicly clean up their computer (un-needed apps, above mentioned, etc.). Its mostly because they dont keep the tools i give them up to date (ill admit it is hard, slow dial up) but if they had a little more knowledge and took the extra half hour a week to update and do scans they'd be fine.
it all stems from a lack of knowledge.

Quote:

---

Originally posted here by catch


Like the people who wrote the report, the person who wrote the article on the report, and now you who posted the article here.

---

Exactly, I didn't write the report, I posted it here for a mature adult discussion. I am here to learn.