| Participate in the fastest growing Technical Encyclopedia! This website is 100% Free. Please register or login using the login box above if you have already registered. You will need to be logged in to reply, make new topics and to access all the areas. Registration is free! Click Here To Register. |
Show Posts
|
|
Pages: [1]
|
|
1
|
THE TECHNO CLUB [ TECHNOWORLDINC.COM ] / Security / Protect Your Little Black Book
|
on: August 28, 2007, 05:31:42 PM
|
The movie Little Black Book features a young woman, Stacy, who is frustrated when her boyfriend refuses to share information about his past relationships. When his PDA, a Palm Tungsten C, falls into her hands, she is faced with a conundrum. Does she give it back, or does she explore it? If she gave it back, we wouldn't have a movie, now would we? Stacy then proceeds to identify his ex-girlfriends and contact them. Let the games begin. Could this really happen? Of course it could. Most PDA's contain a plethora of information about a person and their activities, their digital footprints. People store contact information, appointments, meetings and midnight rendezvous'. They store passwords, login ID's and PIN numbers. They have photos of people they know and sometimes in awkward circumstances. It's a lot to have to explain. The courts are only beginning to grapple with how to handle the content in a PDA. One person's little black book can be very incriminating indeed. For the rest of us, we have nothing as exotic; however, we are all in danger of exposure and threat. Identify theft has become one of the largest white-collar crimes. There is enough information in the average PDA for someone to take over your life. So, what's the solution? Give up your PDA? No. You face the same problem with the typical day planner. It has all of the same information, it's just not as accessible. In fact, a PDA has certain advantages over a planner. You can password protect some of the data. You can even encrypt data. Most importantly, you have a backup. The data is safely stored on your computer and archived on external media if you have taken the proper steps. That duplication of data also means an identity thief has more ways to get to it. So, what can you do? Well, the first concern is to make sure that you backup your data. Synchronize your PDA at least daily. I synchronize my Treo 600 2-3 times each day, usually when I arrive at my office or leave it. Backing up your data means that you should be creating a copy on tape, CD, zip disk, flash ROM or other external media and storing it offsite. If you are not, you are asking for trouble and your business is at risk. If your PDA is ever stolen, you will need to restore that data on a new PDA. Next, you need to minimize the amount of data someone can actually access. Let's face it, if a hacker really wants to get your data, they will succeed. However, not every criminal is a super hacker. Sometimes you just want to keep your information from prying eyes. Just because you labeled something as private in your PDA doesn't mean someone else can't read it. It depends on what application you synchronize with. If you sync with Outlook, records that are private on your PDA may be public in Outlook. The best way to protect passwords and PIN numbers is to store them in a password application that encrypts the data. The best applications have both a PDA application and a desktop application that allows access to the information from either system. The trouble is converting that data from whatever format it's in currently. I've struggled with this one myself. There is no easy method I've found so far. Just set aside time to copy and paste the data into the password application. It might take a few hours to get that information into a secure application. If you're worried about someone viewing your schedule, the best approach is to archive your past history periodically. Outlook has settings that allow you to specify to how often calendar events will be archived. This will wipe the history from your PDA also. Archives are usually stored in an external file that can be accessed later. If you have incriminating photos, delete them. If you want a copy, save it on external media like tape, CD and flash ROM. For contacts, you can archive them or simply move the record to an external file. Outlook allows you to create a .pst file that you can use to save email, calendar, address, tasks, or other information. Once you move a record, it will be removed from your PDA. And, don't forget to delete the cookies and memory cache on your PDA's web browser. Remember that website you checked out last week? Is that something you want everyone else to know about? I don't think so. Don't forget physical security; keep an eye on your PDA. It's possible to take steps to protect your data and remove your digital footprints. Protect your little black book and it will protect you. Rick Cooper, The PDA Pro, is the PDA Coach for productivity anytime, anywhere. He is a national speaker on business productivity and sales. Rick is President of StratAchieve, a company specializing in coaching services to improve productivity and increase revenues. For more information, visit his website at www.thepdapro.com or call (800) 677-6708.
|
|
|
|
|
2
|
THE TECHNO CLUB [ TECHNOWORLDINC.COM ] / Security / Behavior to Stay Safer Online
|
on: August 28, 2007, 05:24:25 PM
|
1. Importance of a Virus Scanner: A Antivirus program can help to prevent you from becoming infected with a Virus or Trojan. It is extremely important to make sure this program is updated at least once a week, and all drives are scanned. Viruses usually are used to destroy your Data or Hardware. Where as Trojans are used to gain remote access into your system. Always scan any new files you receive as well, even if they are off a friend, you don't know where those files originated from. ALWAYS use a little common sense when on the Internet as well. Don't accept files from an entrusted source. Don't go to web sites you have received spam for, they can be infected with viruses or asking you to download files that are infected. Always go only to official sites (i.e... If you ask for a web address for Norton and someone says ww.nortfix.com, that is obviously not an official site). Keep in mind that an Antivirus will only detect known viruses. It is possible that someone can create a new virus or manipulate an existing Virus or Trojan to the point it will no longer be detected by an Antivirus. As each unknown virus is discovered it is then added into the Antivirus database. Always create rescue disks for your Antivirus program, these will enable you to access your computer through MS-DOS if you are unable to access it through windows. If you do not have an Antivirus program try the HouseCall free online virus scan the link if on the top right side of this page. Also never run 2 different Antivirus . By using two different Antivirus software, sometimes the rule sets can cause conflicts in each other.. or think the other is a virus.. which can also give false positives (meaning it detects a file as a Virus or Trojan, when it isn't one).. or not detect viruses as it should. Always delete files you do not remember downloading. 2. Importance of a Trojan scanner: A Trojan scanner is exclusively designed to guard against Trojan horses. A Trojan is a method of intrusion into a system. It is a malicious, security breaking program that is disguised as something harmless. A Trojan can grant complete access to your system to unknown parties, allowing them to commit criminal offenses with your Internet connection. If those offenses are investigated the trail will lead right to you. It also possible for them to get personal or business data and some passwords memorized within your computer. The Cleaner is a good Trojan scanner located on www.moosoft.com. Never open any file or download a file off an entrusted source, spammed web sites being one of them. It is very common for someone to set up a web site, then spam that web site saying you are infected with some virus or Trojan download this fix, or saying they have some great password cracking program, etc. Then you fall for it and your infected. Never use any war tools that require you to install something that brings up a warning on your Antivirus, why not to do this will be explained more on the IRC Newbie page. Always delete files you do not remember downloading. 3. Importance of running a Firewall: A Firewall is one of your best defenses of being hacked. That is if your using a good Firewall and have it configured right. ZoneAlarm free download is a decent Firewall. Although I would recommend ZoneAlarm Pro, which blocks a lot of commonly used hacking attempts. Another one I would not recommend is BlackIce, if you see that one run like there is no tomorrow (gives a lot of false positives). Ultimately though I would recommend running at least one Firewall, even if your computer is connected behind a gateway/router. When looking into firewalls it is a good idea to check what features it has. While one may block a number of hacking attempts, it may not block ads or cookies. Make sure to get all the details before deciding on a Firewall to purchase. Also if you on Windows XP you can configure the Firewall they have built into it, go to start menu ... control panel ..... click network connections ..... double click local area connections ..go to properties ... then select the advanced tab. There you will find the XP Firewall and can enable it. You can also click on the link they provide to learn more about it. Never run 2 firewalls unless one is a software and the other a hardware. Security threats such as those dealing on the application level (your Operating System).. software Firewall can analyze that data better. Whereas hardware better analyzes incoming data from the Internet (snifters, etc.). If you have your own server.. good idea to choose a good one of each (hardware and software). If I am not running a Firewall but would like to see what connections my computer has open how do I do that? Simply go to your start menu under programs or programs/accessories you will find the MS-DOS prompt/Command prompt once you have that open type the command "netstat -an" without the quotations. There is will list the protocol of the connection TCP/UDP, the local address and foreign address, as well as the state which will show either as listening or established. Keep in mind that any connection to the Internet will show up there. 4. Importance of Windows Updates: It is extremely important to update windows. If you are not sure how to, just go to your start menu, then to programs you will see Windows Update there. Windows critical updates are related to security issues within Windows itself. These security issues can be exploited by hackers, these issues can also cause you to get infected easier with a virus if you are a Outlook Express user. As vulnerabilities are detected in Windows critical updates are released for them. Always be sure to update Windows on a regular basis. 5. Safer Passwords: Never have Windows remember your passwords. If you ever do get an intruder on your system passwords saved in Windows can be retrieved. Instead what I recommend is saving all your passwords to notepad then saving them on a floppy disk. A simple copy and paste to use your passwords for any sites you visit, or accounts you may have online. Never use simple passwords such as names of places, things or people. Also do not use passwords that consist of either all letters or all numbers. The best passwords to have should have a combination of letters and numbers(e.g. g74npw2m5), when possible, use symbols (e.g. #^&%!). If the password is case sensitive, then use upper and lower case . Also make sure that the letters and numbers you use are not in clusters on your keyboard (within same general area on keyboard). Make your passwords longer then you may normally make them. Doing this will make any passwords you have harder for an outside party to crack. Apply this to anything you do on the Internet that requires a password. This one I speak from experience on, my last website on a free host, the password was cracked and the content of those pages changed. For many things available on the Internet you require Username and a password, if someone knows your Username or can figure it out, that is half their battle. So make the other half of their battle as difficult as possible. On Irc including characters in your passwords such as ¤, å, ¥, § ,etc... will help even more, to make your passwords harder to crack. Never use any of the following for your passwords (in whole or part): your name or a pet's name, girlfriend, boyfriend. Anything relating to any hobbies you have. Numbers dealing with you, relatives, friends, family, etc. (birthdays ,Social Insurance Number, significant dates, etc.). All of this can and WILL come back to haunt you. 6. What is Spyware?: Software that is installed on your computer/or a virus, which gathers information about you without your consent or knowledge of it. This information can end up in the hands of advertisers, spam e-mail lists, and other interested parties. It can gather information from cookies on your computer. Cookies can store information about websites you have visited, to develop a general idea of your online activity. Cookies generally store information such as preferences from websites, and they are stored on the hard drive of your computer. If your not comfortable with the idea of someone getting any information about your online activities, as most people are. There are programs out there that can be used for either removing cookies from sites you have visited as well as programs that will detect and remove known spyware programs. Lavasoft Ad-aware is a good program for removing spyware programs. Window Washer is an excellent program for removing a lot of your online history (cookies/temp Internet files... etc...). For people who use Kazaa, don't be surprised if that shows up on an Ad-aware scan, It will. Once you remove the spyware detected, Kazaa will fail to work without it. A suggestion for future use, switch to Kazaa Lite.
|
|
|
|
|
3
|
THE TECHNO CLUB [ TECHNOWORLDINC.COM ] / Security / Dont Miss Information Because of Misinformation
|
on: August 28, 2007, 05:23:03 PM
|
|
Dont Miss Information Because of Misinformation
It has been said that with the wealth of information, freely available, the Internet has the ability to make you smarter, faster, than any other medium on the planet.
Of course with an equal amount of mis-information, it also has the ability to make you dumber, faster, than any other medium on the planet.
So how do you decide which sources of information to trust and which sources to avoid?
It has long been a source of debate, whether or not, any information can be 100% reliable. There is, it is said, no such thing as absolute truth (is that an absolute truth?).
Really though, there is no point in driving yourself mad with such trivial philosophies. All you have to do is decide, in your own mind, where your level of skepticism begins and ends. And skepticism is important in this day and age. That isn't a negative viewpoint, it's just a realistic assessment of what you need to survive.
Imagine for a moment that you're looking for a solution that will send your weekly newsletter to your eagerly awaiting mailing list. You can choose from a myriad of different software, hardware, third-party solutions. Some free, some cheap, some expensive and some unreliable. A decision has to be made. Who's going to help you? Look at the options.
SPAM: Lots of unsolicited emails promise to have the definitive solution and at one time this might have been worth a look. Today, however, if a company is so discourteous that they ignore the generally accepted rules of spamming do you really want to do business with them?
Verdict: Dubious
WEBSITE: Ranked high on Google, plenty of glowing testimonials, even a 30 day money-back guarantee. But wait! Are those testimonials real or fictitious? Is there a clause that will prevent you from returning the product if you dislike it? Can you really believe anything you are being told?
The reality is, that many companies will say anything to make a sale. This is true both on the Internet and the High Street. Desire for profit can quickly deteriorate good intentions. I don't need to preach about this. You know it's true.
Accept this, then temper your paranoia by checking the facts. Legitimate companies exist on the Internet by the thousand. The ones worth buying from will happily talk to you on the phone and answer your questions in person. They will respond to your questions by email, probably on the same day. And, if they're really worth spending money on, they will let you personally contact previous customers so you can confirm that what they're saying is true.
Make the company work for the sale. If they can't be bothered to reply to your emails or turn the answering machine off, don't bother to give them your credit card number.
Verdict: Tread carefully
RECOMMENDATIONS: The product/service is recommended by a third party, perhaps in an ezine, or on a website. Sounds great? A genuine testimonial? But wait!
What is the recommender's motive?
Love for fellow man?
Appreciation of the product?
Cash?
If you picked option number 3, you're probably right. Joint ventures and affiliate programmes have led to many a recommendation of a product/service that hasn't been evaluated or even used. There are exceptions but there's a good chance that the recommendation is linked to a commission.
This doesn't, by itself, mean the testimonial is bogus. It simply means, as previously stated, that you should use some skepticism.
Look for recommendations from newsletters or websites that have been around for some time. If they have a reputation to consider, they will (should?) think twice before promoting something they haven't fully investigated.
Verdict: Useful, be sure about the source
SEARCH ENGINES: Once you've found the product/service that sets you alight, look for negative feedback. Search for the product name alongside words like "hate" or "problem".
If lots of people have used this product and had problems, then at least few will likely have posted their experiences on a forum.
If no results appear, take this as a good sign and move on.
Verdict: Essential step
FORUMS: If you're really having difficulty finding what you are looking for, forums could be the key.
Look around for about half a dozen forums that you like and have plenty of traffic. Then post a description of what you need on all of them. Check back frequently and see what comes up.
Forums are an excellent way to find uncensored information offered solely for its value. Generally speaking, what you see is what you get.
There are, of course, exceptions. Occasionally someone might recommend something, solely because they are affiliated in some way. But if the forum is busy enough, they probably won't get away with it.
Verdict: About as safe as you can hope to find
Does the above sound obvious to you? Maybe it is, but every day hundreds or even thousands lose money on poor or useful products/services that they were convinced were perfect. If you doubt it, check through a few related forums.
If you run your own ezine/website/forum, ask yourself what you can do to help those who aren't as experienced. Your honesty will set you apart from the rest.
If all of this seems helpful, all well and good. Your final task is to apply the above information to this article and ask yourself, with just a touch of skepticism:
"Is it information or misinformation?"
Dylan Campbell has been quietly making a living on the Internet since 2000. He has a unique, and often controversial, view of the industry.
Dylan Campbell writes exclusively for The Nettle Ezine.
|
|
|
|
|
4
|
THE TECHNO CLUB [ TECHNOWORLDINC.COM ] / Security / Can I Guess Your Password?
|
on: August 28, 2007, 05:17:05 PM
|
|
Can I Guess Your Password?
We all know that it's dangerous to use the same password for more than one program. If you sign up for a program run by someone of low moral fibre, what is to stop them running through various programs with your username and password to see what they can access?
But of course remembering all the different passwords can be a headache. And writing them down somewhere isn't a great deal safer than using the same password again and again.
You can buy software that stores the passwords for you, but do you really want to pay money for another piece of software that performs a solitary function?
Try this simple, two-step, technique that lets you generate an infinite number of passwords, without having to remember any of them.
Step One: Choose a 4-6 letter word or number sequence that you can remember easily. Needless to say, don't reveal this to anyone. For the purpose of this demonstration, I'll choose the word "cash"
Step Two: Apply this secret word or number sequence to the name of the program you are setting up the password for.
To accomplish this, invent a couple of easy to remember rules.
Rule 1: Decide which part of the program name you are going to use. It could be the whole name, the first 6 letters of the name, the last 8 letters of the name. It's totally up to you, be as creative as you like.
eg ? For the program TrafficSwarm, I might choose the first 8 letters of the name. This give me: "traffics"
Rule 2: Take the portion of the program name you have selected and merge it with your secret word or number sequence to create a unique password. Again, be as creative as you can with this rule. You could replace every second letter, every third letter, every vowel or every consonant.
eg ? If I replace every second letter of "traffics" with my secret word "cash", I get " t c a a f s c h "
or
- If I replace every vowel of "traffics" with my secret word "cash", I get " t r c f f a c s ". The "s" and the "h" are not used as "traffics" has only two vowels, but some words will use all four letters of "cash". Some words might have more than four vowels, in which case just start back at the beginning with "c" and "a" and so on?
You don't have to worry about making your rules overly complex. Even the best code-breakers would need to see several of your passwords before they could start to guess what you rules are.
As long as you keep your rules safe and sound, your password is secure. But the real beauty of this system, is that you don't have to remember the passwords you create. You ONLY have to remember the rules.
When you log into the program the next time, just apply your rules to the program name, and you can work out what password you generated. Once you have been using the rules for a while, you'll generate the password in your head, without even having to pause.
Don't worry if it seems a little complicated at first. Read this article through a couple more times and then try this technique with just a couple of programs. Once you are happy with it, all that's left to do is to start working your way through existing programs and update your passwords. It's time consuming, but for peace of mind you'll be glad you did.
David Congreave is owner of The Nettle Ezine, the newsletter for the home business -- online. David lives in Leeds, in the United Kingdom, with his wife Leanne.
|
|
|
|
|
Copyright © 2006-2023 TechnoWorldInc.com. All Rights Reserved. Privacy Policy | Disclaimer
Loading...
|