Security Tips & Talk

[Corrine]

Even though I have found that I can get a lot of information on current events in the world of computer security via Twitter, I still have a large list of sites I subscribe to via RSS. One such site is Microsoft's Security Tips & Talk.

The latest post is quoted below as an example of the helpful information provided for home computer users.

What is screen scraping?

Screen scraping is the act of taking all the information that a person has posted on their Web site or social networking page and then using the information to break into the user’s account or to commit some other fraud involving identity theft.

Social networking Web sites such as Facebook have grown exponentially in the past few years, and it’s not uncommon for people to post personal pictures and reveal personal information about themselves. People often prefer Facebook to traditional blogs because information is usually only available to people that they choose. However, if cybercriminals gain access to your Web site or social networking page, they can use screen scraping to steal your information and can pose as you. For more information about this type of scam, see Scammers exploit Facebook friendships.

You can use strong passwords and learn techniques to avoid social engineering scams, but the best way to prevent the negative effects of screen scraping is to minimize the amount of information that you post online.

Here are a few tips:

· Do not post anything online that you would not want made public.
· Minimize details that identify you or your whereabouts.
· Keep your account numbers, user names, and passwords secret.

For more information, see the following articles:

· Protect your privacy on the Internet
· Your information on the Internet: what you need to know
· How to reduce the risk of online fraud
· Help protect yourself against phishing scams and identity theft

 

[Desslok]

Yeah. I'm the go to guy for friends and family when they have computer issues. So people give me their passwords, and I cringe when 99% of them give me their password and it's their first child's name in all lowercase. And a picture of that kid is on all their websites, facebook etc with their name under it.

 

[Joan Archer]

Thanks Corrine, I hadn't seen this one before although I do have a few of Microsoft's newsletters in my RSS Feeds.

 

[severedsolo]

Yeah. I'm the go to guy for friends and family when they have computer issues. So people give me their passwords, and I cringe when 99% of them give me their password and it's their first child's name in all lowercase. And a picture of that kid is on all their websites, facebook etc with their name under it.

*tut* some people... only one person has my passwords, and thats my girlfriend, and even then i have to remind her every time she wants to use one,

 

[Joan Archer]

The only person who has my passwords are me, even my husband doesn't know them.

 

[Corrine]

Desslok, I hope you take the opportunity to explain to them the importance of strong passwords.

Thanks, Joan! Security Tips & Talk has been a long-time favorite. I hope you've subscribed now.

Same here, Joan. Not even my husband has any of my passwords. Then again, I'm not sure he'd figure out how to start up any of our computers. I also have a different pw for every site. I may need to provide instructions in my will on what to do with my computers if something happens to me.

 

[severedsolo]

Same here, Joan. Not even my husband has any of my passwords. Then again, I'm not sure he'd figure out how to start up any of our computers. I also have a different pw for every site. I may need to provide instructions in my will on what to do with my computers if something happens to me.

:roflmao: i can imagine that, tbh the only reason she has the passwords is because invariably it is yours truly who sets everything up, so once its done its just "right the password is such and such" so while i say they are my passwords because i come up with them and set them, but in truth their her passwords, she just never bothers to change them from whatever i have set them as

 

[Desslok]

Desslok, I hope you take the opportunity to explain to them the importance of strong passwords.

.

Yes I do. For most people that I know won't remember something from the strong password generator. I help them come up with a passphrase that will be easy for them to remember. Then I explain to them to use at least 1 cap and substitute at least 1 letter with a numb3r, and end with a special character. THat way it is easy enough for most people, but still pretty strong. All without telling me what it is.

 

[tw33k]

My passwords are all kept in a locked One Note folder on a bit-locker encrypted flash drive. That way, I only have to remember 1 password.

 

[Jacee]

No one has my passwords either. My husband can turn on the computer and click the Google search icon ... that's pretty much the extent of his computer experience.

 

[Desslok]

My passwords are all kept in a locked One Note folder on a bit-locker encrypted flash drive. That way, I only have to remember 1 password.

That's a little complex for the average "soccer mom" who uses facebook, email, and maybe does some Online banking. WHat I tell some people that I think will follow the advice is to come up with a good passphrase as I mentioned, then just append the first letter of the service to the end or beginning to keep them different but easy to remember still, for example:
P@s5w0rd! - Windows password
P@s5w0rd!F - Facebook password
P@s5w0rd!E - email password
etc

 

[Corrine]

Desslok, That is a good way to get them to at least have a different password for each site in case something happens. The next step is to see if you can convince those friends & family members to use a different pass phrase for any online banking/bill paying sites.

 

[malexous]

For sensitive log-ins I use the same 20+ character password.

It contains random letters, random numbers, punctuation, uppercase letters and lowercase letters.

I don't feel a need for different and changing passwords.

 

[Packet]

i long for a common two-factor auth approach to selected items of my choosing (not a blanket include-all common shared data system).

but then again, i also long for a solid gold toilet...
since neither of those two things are going to happen anytime soon...

 

[Joan Archer]

Desslok, I hope you take the opportunity to explain to them the importance of strong passwords.

Thanks, Joan! Security Tips & Talk has been a long-time favorite. I hope you've subscribed now.

Same here, Joan. Not even my husband has any of my passwords. Then again, I'm not sure he'd figure out how to start up any of our computers. I also have a different pw for every site. I may need to provide instructions in my will on what to do with my computers if something happens to me.

Yes I did as soon as you mentioned it I'm always interested in new information and my RSS Feeds are growing, as is my Favourite list.