Tuesday, April 15, 2014

Some Online Security Tips


Computer security and privacy have been dominating the headlines.  The most recent announcement in the media deals with a major security vulnerability named Heartbleed. This bug affects a popular encryption technology designed to protect your sensitive data on the Internet, like usernames, passwords and emails.  Unlike some bugs and viruses, there really is no protection that you can install on your computer to address Heartbleed since it exploits a programming error in the encryption software and as such requires the software developers to fix the problem. 

There are however things that you should do to assure your security and privacy whenever you go online.  I have written often about the need to be vigilant about security.  This might be a good time to reiterate some of those tips.

When you purchase a Wi-Fi router, smart phone or other device that require a password be sure to change the default password.  Many devices come out of the box with a standard password already installed.  The problem is that often these passwords are known by most every hacker on the internet.  So failure to change it leaves you open and exposed.

Speaking of passwords, don’t use obvious names and dates.  Your birthday, your kid’s name, your street address do not provide much protection.  A password with a numerals and both upper and lower case text along with some punctuation marks are best.  The password should not make a real word or phrase.

Many of us are wedded to our smartphone and tablet and use them for all types of online activity and take advantage of the proliferation of free Wi-Fi hot spots.  From McDonalds to Speedway, from interstate rest stops to public parks, it seems we can most always find a free Wi-Fi connection.  While reading a newspaper or checking the weather are fine, you should not use these public Wi-Fi spots to access online banking sites or other sites that contain important and private data.

If you use online banking many institutions will allow you to be notified when any transaction that you did not initiate gets processed.  So when a deposit or debit is made to your account, you will get an email alerting you to the activity.  This service often requires you to activate it on your account.  Be sure yours is activated.

This last tip might be an example of closing the barn door after the horses have escaped.  More and more merchants offer affinity cards allowing discounts and other perks to card holders.  When you visit the store you swipe the card.   Over and above the discount you receive you also have provided the store with a trove of purchasing information.  Some stores sell this information to third parties.   Also more and more often you are asked for your telephone number when checking out as well as the offer to email you a receipt.  Again giving out little bits of information over time can provide a very accurate profile for those miscreants looking to steal your identity and money.

Increasingly we will do more on line and as we do there will be better protections developed like voice, retina and or finger print recognition. Until these are common place, be careful out there.

No comments:

Post a Comment