The information presented below is a guide based on opinions of many who are active in internet security and will be updated from time to time as threats change.

Contents:

Email Account

Stolen Address

Stolen Account

Cookies

Virus Protection

Hack Attacks

Email Account

Occasionally we receive out-of-character or inappropriate email from classmates and others.  These messages are SPAM sent from a compromised email address or from a compromised email account (there is a difference).  There are actions you, and those you communicate with, can take to prevent most occurrences in the future and some steps to take if your account has been compromised.

Stolen Address

The most common method spammers use involves a virus-infected computer, probably not yours but maybe that of a friend, of a friend, of a friend…  When a message is received many email programs, either automatically or by user-choice put all addresses contained in the “To:” and “Cc:” in the receiver’s address book.  If the message is forwarded to a number of people without removing the visible addresses they could be added to many address books.  If the originating computer or any downstream computer is infected with a virus that collects addresses, SPAM can be sent that appears to be from any address.  This is not preventable as long as someone in this email chain is infected.

To prevent or minimize stolen addresses remove all “Cc:” addresses before forwarding an email message.  If you send to multiple recipients, use “Bcc:” instead of “To:” for all addressees and put your email address in the “To:” box.  Another solution is to send a separate message to each address (inconvenient).  For messages to all on the class mailing list use the "Mail to Class" page on the phs1957 web site because they are sent separately. The problem will not be solved until we all keep our virus protection updated and use “Bcc:”.

Stolen Account

If your email account is stolen, the hacker has access to all account information including address book, password, alternate email address and the answer to your secret question.  This means that they can access your account again and change everything including the alternate email address if you just change your password and nothing else.

Not only must the password be changed to something hard to guess, but also the secret question and answer.  It is a good idea to make the question and answer logically unrelated, such as:

Most stolen accounts occur with free, web-based providers that have limited customer service (Hotmail, Gmail, Yahoo, etc.).

In addition:

Send questions and comments, to webtiger or call (314) 438-5591.

top

Cookies

Cookies are small text files that some web sites use to identify your preferences.  This can make your web use more efficient by remembering some things you would have to type in each time you visited a site.

For example, my bank has branches nationwide.  When I go to the bank site I am asked to select the state my bank is in from a drop-down list.  Then I am asked a few more questions about the account type and what I want to do.  All of this information is stored in a "cookie" on my computer.  Unless I delete this cookie, the next time I bank on line none of this information will be asked and I will go directly to a logon screen.  This cookie does not contain account number or password information.

The only site that can read a cookie is the one that sent it; however, some sites sell their cookies to others.

You can set your browser to warn you before you accept cookies or not accept them at all.  Some people do this for privacy concerns because some (aggregate, not personal) information can be collected with them.  However, keep in mind that some secure sites won't work if you don't accept their cookies.

top

Virus Protection

Get a good anti-virus program.  The best ones update daily, and allow their users to download updates. As new viruses are developed and discovered, new protections have to be designed.  Unless you update, you won't have full protection.  With the recent onslaught of new viruses it is prudent to check for updates daily.

Even if you never use the internet your computer still needs an anti-virus program.  Viruses can be transmitted through infected USB drives, CDs and floppy disks.  Boot-sector viruses can infect your computer when you turn it on with media left in the drive.

Practice safe computing.  Never use a disk or other media that belongs to someone else without checking it for viruses, and making sure the program you're using to check it is reliable and updated.  Don't let your kids share disks with their friends either.  Make sure that anything you download from the Internet is virus checked first, and don't download anything from a site you don't trust.

top

Unfortunately, there are those who for whatever reason, attempt to break in to computers for which they have no authorization.  If you have an "always on" internet connection you need to protect it with a firewall.  These are available in router hardware for a price, and well worth it, and software from many sources.  The hardware router lets you share your internet connection with more than one computer in your home.  Most new computers come with a firewall.

top