Computer safety

Internet Safety

• Never Open Suspicious Files.  Assume that any file you receive may be potentially infected, even if you know the sender well. Viruses, spyware, and other malicious code typically originate from an infected PC and its address book, thus it will most likely come from family, friends, or business associates. When working with your email, browsing websites, or chatting via an Instant Messenger, do not accept any unsolicited files from anyone since they could contain malicious code.
• Clicking Unknown Links.  Avoid going to any URLs in email messages that may be questionable. Hackers often infect web pages with malicious code, so do not visit any website that you are not familiar with.
• Anti Virus.  Always keep your anti-virus, anti-spyware, and firewall protection up to date. New threats emerge regularly so it is critical that you keep your protective software and firewall technology current. In addition, scan your system monthly with the settings recommended by your Internet security provider.
• Restrict Administrative Privileges.  It is important to make sure that all employees have a level of administrative access equal to their job responsibilities. This includes not allowing employees to install software, music files, games, etc., as well as restricting access to external services such as webmail and remote control services. These types of restrictions will help protect your organization from spyware such as keystroke logging.
• Operating Systems.  Keep your operating system and your application software patches up to date. In order to prevent being infected by malicious code, keep the software patches up to date for your operating system, i.e.: Windows, Linux, Apple, as well as for your web browser software.
• Stay Informed and Educated.  It is important that not only your IT department stays up to date on the latest threats but that your employees and your business customers are also advised of them and that you educate them about the techniques of "safe computing." Internet security providers release formal alerts on the latest threats and vulnerabilities and how to protect against them.
• Spam.  Spammers scan the internet to find computers that aren't protected by the security software, and then install bad software - known as "malware" - through those "open doors." That's one reason why up-to-date security software is critical. Malware may be hidden in free software applications. It can be appealing to download free software like games, file-sharing programs, customized toolbars, and the like. But sometimes just visiting a website or downloading files may cause a "drive-by download," which could turn your computer into a "bot." Spammers take over your computer by sending you an email with attachments, links, or images which, if you click on or open them, install hidden software. Be cautious about opening any attachments or downloading files from emails you receive. Don't open an email attachment - even if it looks like it's from a friend or coworker ' unless you are expecting it or know what it contains. If you send an email with an attached file, include a text message explaining what it is.
• Don't Let Your Computer Become Part of a "BotNet" Some spammers search the internet for unprotected computers they can control and use anonymously to send spam, turning them into a robot network, known as a "botnet." Also known as a "zombie army," a botnet is made up of many thousands of home computers sending emails by the millions. Most spam is sent remotely this way; millions of home computers are part of botnets
• Use Security Software That Updates Automatically.  The bad guys constantly develop new ways to attack your computer, so your security software must be up-to-date to protect against the latest threats. Most security software can update automatically; set yours to do so. Also, set your operating system and web browser to update automatically.   If you let your operating system, web browser, or security software get out-of-date, criminals could sneak their bad programs – malware – onto your computer and use it to secretly break into other computers, send spam, or spy on your online activities. Don’t buy security software in response to unexpected pop-up messages or emails, especially messages that claim to have scanned your computer and found malware.  Scammers send messages like these to try to get you to buy worthless software, or worse, to “break and enter” your computer.
• Treat Your Personal Information Like Cash.  Don’t hand it out to just anyone. Your Social Security number, credit card numbers, and bank and utility account numbers can be used to steal your money or open new accounts in your name. So every time you are asked for your personal information – whether in a web form, an email, a text, or a phone message – think about whether you can really trust the request. In an effort to steal your information, scammers will do everything they can to appear trustworthy. Learn more about scammers who phish for your personal information.
• Check Out Companies to Find out Who You’re Really Dealing With.  When you’re online, a little research can save you a lot of money. If you see an ad or an offer that looks good to you, take a moment to check out the company behind it. Type the company or product name into your favorite search engine with terms like “review,” “complaint,” or “scam.” If you find bad reviews, you’ll have to decide if the offer is worth the risk. If you can’t find contact information for the company, take your business elsewhere.  Don’t assume that an ad you see on a reputable site is trustworthy. The fact that a site features an ad for another site doesn’t mean that it endorses the advertised site, or is even familiar with it.
• Give Personal Information Over Encrypted Websites Only.  If you’re shopping or banking online, stick to sites that use encryption to protect your information as it travels from your computer to their server. To determine if a website is encrypted, look for https at the beginning of the web address (the “s” is for secure).  Some websites use encryption only on the sign-in page, but if any part of your session isn’t encrypted, the entire account could be vulnerable. Look for https on every page of the site you’re on, not just where you sign in.
• Protect Your Passwords. Here are a few principles for creating strong passwords and keeping them safe:

1. The longer the password, the tougher it is to crack. Use at least 10 characters; 12 is ideal for most home users.
2. Mix letters, numbers, and special characters. Try to be unpredictable – don’t use your name, birthdate, or common words. 
3. Don’t use the same password for many accounts. If it’s stolen from you – or from one of the companies with which you do business – it can be used to take over all your accounts.
4. Don’t share passwords on the phone, in texts or by email. Legitimate companies will not send you messages asking for your password. If you get such a message, it’s probably a scam.
5. Keep your passwords in a secure place, out of plain sight.

• Back Up Your Files.  No system is completely secure. Copy important files onto a removable disc or an external hard drive, and store it in a safe place. If your computer is compromised, you’ll still have access to your files.  

Web Browser Security:

Common Misconceptions:

Misconception:  Windows Updates Make Antivirus Software Unnecessary

Since Windows updates are crucial to your PC’s security, if you’re diligent about installing patches you can forget to use an antivirus. 

Truth: Windows Updates Come After The Fact.  Windows Updates patch known vulnerabilities but aren’t meant to protect from everyday threats.  While keeping Windows up-to-date is a necessary part of security, it can’t replace an antivirus, which works nonstop to protect you.  Also, remember that anti-virus software is a management tool to catch already known viruses.  AV software does not stop brand-new viruses or social engineering scams.

Misconception:  Malware Infections Are Obvious

Truth:  A Lot of Malware Is Silent.  There are dozens of rogue applications that are spying on you without making a sound. Many of these create zombie computers, which are responsible for many of the spam and website attacks that happen constantly. Additionally, if you fall for a phishing scam and a password falls into a thief’s grasp, they could be accessing your accounts — quietly, of course, so that you don’t suspect anything.

Don’t assume that just because everything looks normal that it is. Change your passwords regularly to be sure that someone isn’t getting in behind your back.

Misconception: I Don’t Do Anything Important On My Computer, So I Don’t Need To Be Careful

This is probably the most common reason people give for not keeping their computers safe. Sadly, it’s a poor excuse and those who give it are wrong.

The Truth:  At the bare minimum, a virus or other malware infecting your PC — even if your financial info isn’t at risk — is going to take time to deal with. Your time is valuable, and if you’re recruiting a tech-savvy friend to fix your PC after your neglect, their time is affected too. Wiping your computer and starting fresh thanks to malware means more time and effort to get your programs re-installed and running just the way you like.  In addition, Malware isn’t looking to steal files on your system. Rather, it’s tracking your every keystroke, stealing passwords, or even hacking into your webcam to spy on you. 

Misconception:  I don’t run Windows, so I’m immune to Malware

The Truth:  All platforms are vulnerable and this includes iPad, iPhone, Android and other mobile devices.  While Windows viruses won’t affect Mac computers, Macs can still get infected with viruses.  In addition, you can fall for phishing tricks, perhaps via email or social media, no matter what platform you use.   Accidentally handing your password over to a fake site is going to yield the same result no matter if it’s done on Windows, Mac, or Android.

Misconception:  My Apple or Android tablet is secure

The Truth:  There is a plethora of mobile-based malware and viruses out there today.  Never let your guard down and carelessly open a website, email, or attachment on a smartphone or tablet.  These devices can be infected and can infect a corporate network if connected as a BYOD device.

Misconception:  Windows Is Inherently Insecure

The Truth:  Ever since Windows 7 hit the scene, the virus problem has been significantly curtailed. The problem is that most Windows users don’t care enough to update their systems with pertinent security patches. Microsoft is good about plugging security holes as they’re found, but if users don’t apply those updates, they leave themselves vulnerable.  At that point, Windows itself is no longer at fault.

Moreover, Windows is the world’s most popular operating system. Combine that with the fact that Windows does not require its users to be tech-savvy and you’ve got a recipe for a high number of security incidents. 

Misconception: You don’t need security software

The Truth:  The ones who create malware and viruses are always looking for new ways to facilitate the spread of malicious software, which means that their methods are always evolving.

But more importantly, we are human. Humans make mistakes. We can’t keep our guards up 24/7 and sometimes we’re lazy, forgetful, or reckless. All it takes is one lapse in judgment for your computer to be infected and that’s the real value of antivirus software: it protects you through your mistakes.

If you aren’t using antivirus software, install one now along with a virus scanner. Afterward, if you find that you have an infection, clean it up as soon as possible.

Misconception: All You Need Is Security Software

The Truth:  Malware and virus creators are always engineering new ways to spread their code.  Antivirus companies are always one step behind (they have to study a virus to understand its signature before they can protect against it) which means that the notion of antivirus is fundamentally reactionary.  AV software does not stop brand-new viruses or social engineering scams.