Online Security Best Practice Tips
Just as the Internet has its good side, it also has its bad, dangerous side. The World Wide Web has become the virtual playground for people with malicious intentions to wreak havoc on computers and computer networks through malware (viruses, spyware, worms, trojans), or to steal identities and personal information, such as bank accounts and credit card numbers.
Though there are computer programs like antivirus, anti-spyware, and firewall software that protect against most threats, they will be rendered useless if the person using the computer is not aware of the proper online security practices.
You don’t want to be a victim of identity theft online and you don’t want to deal with a virus, so the best way to protect yourself is with updated security software and by practicing proper online security and privacy when using the Internet.
There are basically three main ways your privacy online may be threatened. These are:
- Through email and Instant messaging (IM) – Messages sent by spammers or scammers that attempt to trick a user into either providing their user name and password or other personal information by luring them into a fake login website or by directly asking such information in the message. (see Top Ten Internet Scams)
- Surfing or browsing websites – Similar to that phishing through IM and email, only it is done through a website by clicking links or online advertisements.
- Bots or custom programs that harvest information from the Internet - Customized computer programs scour the Internet for publicly available information, especially email addresses that will be used later to send spam or phishing emails.
Online Security Tips
The Internet is such a convenience that you can’t just stop using it because of these threats to your security and privacy. Since phishing uses social engineering, preying on the ignorant and unaware to harvest their identities, practicing secure and safe use of the Internet is the best weapon against such threats. Here are some simple tips:
Never give out your user name and password - No matter how legitimate the email or instant message you receive looks, you should never give out your user name or password. Often, phishing messages pretend to be service providers of email, banks and other financial institutions, social networking sites, and fund transfer sites that tell you of some problem or concern, and then later ask you to reply with your user name and password.
Legitimate messages from service providers never ask you for your personal information and other details. If you receive a message that asks such information, report that message immediately to your service provider or simply delete the message.
Log-in Only through the Official Website – Phishing is evolving and has found a better way to trick users by creating an authentic-looking log-in screen for you to type in your log-in information, but simply captures that information you type in.
This method of phishing varies, but is often done through email and instant messaging. It asks you to log-in into your account through the link they provide. Those links or URLs trick either the user, Internet browser, or both into thinking the link points to the valid, original log-in page of the site. You can never be sure about this so it is best that you log-in manually by typing the address in your browser then log-in, regardless if the message you received seems valid. Remember, email addresses can be spoofed or faked to make it seem that the message is authentic.
Make Sure that Online Forms are Secure – The only way you can be sure that the information you are sending is safe from digital eavesdroppers is to make sure the site uses encryption. It is quite easy to know if the website you will be using uses encryption like SSL is when you see a small padlock like icon at the bottom of your Internet browser or when the URL in the address bar begins with “HTTPS”, an encrypted version of the HTTP (Hyper-text Transfer Protocol).
Clear your Browser’s Cache – Every site you visit on the Internet downloads the content into your computer. It contains single pages that you visit during your session. Caching is done in order to speed up the loading of pages. If you use a public or office computer, one where several people access the same machine, it is really important that you delete those files stored in your browser. The websites you have visited, cookies from sites, and saved passwords are stored there. You can never tell when a person with malicious intent accesses that computer to retrieve that information.
If you use the Firefox browser, you can easily clear your tracks by pressing CTRL+shift+DEL or you can automatically set it to do that when you close the program. (More tips on how to clear your browser’s cache)
Avoid Saving Log-in information in your Browser – Saving log-in information in your browser is very handy especially if you have several accounts in different online services because you don’t have to remember each and every log-in detail. The problem is, those saved passwords are not encrypted, so someone that can physically access the machine can easily steal that information.
The use of that feature is fine if it is your own home computer. However, you run the risk of having your log-in information stolen at cafes or at work where other people may gain access.
Another tip: if you are really concerned about your privacy and security, you should use proxy servers when using the Internet. A proxy server acts as a bridge between your IP address and the website you are visiting. This means that the proxy server’s IP address is the one that shows up on the sites you visit. There are free proxy servers you can use, but you may have to bear with slow speeds or advertisement banners on the sites you visit. If you don’t want all that hassle, you can sign-up for a paid service.
It is almost impossible to rid the Internet of its bad side, so the best way is to avoid falling victim. Equipped with the right security software and the knowledge of safe online practices, you will greatly reduce the chance of being victimized.
Be the first to comment on this article




