INTERNET AND COMPUTER SECURITY AND SAFETY

THESE ARE IMPORTANT GUIDELINES AND INFORMATION TO KEEP YOU AND YOUR COMPUTER SAFE.

COMPUTER AND INTERNET SECURITY AND SAFETY.

SOME INFORMATION AND TIPS TO HELP YOU USE YOUR COMPUTER AND THE INTERNET SAFELY.

There is a lot of good information on the internet itself about computer and internet security and safety. This guide will highlight the areas you need to be aware of and the key steps you can take.

There is some good advice in the guidelines for using our discussion groups especially about personal information and it applies to every website you visit,please read them.

Another thing to consider is your choice of passwords. Change them regularly and avoid using pet/family names,dates of birth,etc for passwords or pin numbers.

THE VITALS.

Make sure that your anti-virus is up to date and operating properly.
Never open email attatchments unless you are certain of who they came from.
If you have a firewall make sure it is operating properly.
Check your anti spyware and malware are up to date and switched on.
If you try to run two anti virus programmes you may cause conflicts which can damage your computer.

SORRY IF THERE SEEMS TO BE AN AWFUL LOT TO TAKE IN BUT IT IS WORTH READING, EVEN IF YOU ONLY DO IT SECTION BY SECTION WHEN YOU HAVE TIME!

YOUR COMPUTER.

Viruses You must have anti-virus protection. If you don't have it then there are a number of free anti-virus programmes available to download.

There are more, just google free anti virus and you will see the options. your Internet Service Provider will usually offer some anti virus protection. The important thing is to keep whichever you have up to date.Check to see if you can set it it to automatically update itself,if it can't find one which does.The three above do.

Use it don't just rely on its automatic running. If you down load a new programme or application from the web run a full manual scan after the installation is complete. If you load something to your computer from a disc scan it after installation,if you are unsure about the disc and your anti virus allows it then scan it while it is in the disc drive before you run it or use it.

If you are unsure about how to use your anti virus ask a friend for help. This is a goodish site about anti virus http://www.scambusters.org/anti-virus.html

SPYWARE.

Spyware is software which hides itself somewher on your computer collecting information about you and what you do on the internet.Spyware can invade your privacy by passing on your personal details without you even knowing that this is what it is doing.If you shop on the internet using your credit or debit cards some spyware can record your credit card details so beware!The information collected about you is usually for advertising purposes but spyware can scan files on your hard drive, listen in on other applications like chat programs, read cookies - the list is endless...

ADWARE AND MALWARE.

Adware is a form of spyware which installs secret advertising software on your computer. These generate on-screen adverts (often pop-ups) which can be really annoying! The worst forms of adware 'hijack' links in web pages. So, instead of taking you to the correct website they take you to a different site - who have often paid the adware makers.

Malware is another form of spyware. It's short for malicious software and is often designed to cause damage to your computer system just like a virus does

BASIC SPYWARE.

Spyware is often downloaded onto your PC when you download other free software. When you see a license agreement for any software you download from the internet read it carefully.Often buried in the licence agreement will be a disclaimer saying that information about you and your browsing habits will be sent to the company's website

Other forms of malware can do other horrible things like reveal the keys you press on the keyboard or your password to hackers.That's why having spyware on your computer is like having somebody rummaging through your drawers to some people!

These adware/malware applications can also seriously use up system resources and can cause your PC to crash or freeze.

HOW YOU GET IT.

A common way of spyware getting onto your PC is by downloading peer-to-peer file swapping programs such as Kazaa. Spyware companies pay these file swapping services to bundle the spyware into their downloads.Also, beware of unusual grey dialog boxes that appear when you are browsing the internet. Don't click on the install/OK button, just close it!

PRIVACY.

It is reassuring to some people to know that any information that is sent back to legitimate 'marketing' companies is supposedly 'anonymous'. However, you have no control whatsoever on what data is being sent to the company.Spyware is not illegal and honest marketing and advertising companies do disclose information on the data they are collecting. But as spyware can do so much more than just collect anonymous data it's best to steer clear of it.

GET RID OF IT.

Companies like Lavasoft offer free software like adaware that will scan your computer and remove the spyware/adware.

For a comprehensive list of free and pay software have a look at spyware warrior. This page also includes a list of rogue anti-spyware software that pretends it will help when it actually is really spying on you.

If you have a question visit spyware info for forums where experts on spyware and malware participate.

Also, don't forget to keep your anti-virus software up-to-date and your firewall enabled.

FREE SPYWAREDETECTION.

http://free.grisoft.com/doc/download-free-anti-spyware/us/frt/0

http://www.spywareterminator.com/

ROOTKITS

A relatively new kid on the block and one that can ,potentially be more destructive than a virus. Again there are some free detectors and lots more information on the internet.

A Rootkit is a term that applies to cloaking techniques. When malware utilizes a Rootkit, it can become invisible to security systems, including antivirus and malware tools. Rootkits are nearly undectable and almost impossible to remove. A Rootkit’s purpose is to hide itself so that a user can not identify and remove the malware software. A Rootkit can hide almost any software including large collections of files on your computer or company server.

How does the attacker get in?

The attacker identifies an existing vulnerable area in the computer or network. For example, it could be an open network port, unpatched system, or weak administrative password. Once the attacker is in, they can manually install the Rootkit.

What to do to prevent Rootkits?

Make sure software updates are performed, antivirus scanners are used, a firewall is on the network, and a strong security/password policy is in place.

How do you identify and remove Rootkits?

If you think you have a Rootkit look for some tecnical advice on the internet. There are software packages such as Rootkit Revealer, but options are somewhat limited. The attackers are good. Sometimes the only safe way to remove the Rootkit is to reformat your hard drive and reinstall Windows.

MORE INFORMATION ABOUT ROOTKITS:-

http://antivirus.about.com/od/securitytips/a/rootkits.htm

http://technet.microsoft.com/en-us/sysinternals/bb897445.aspx

http://www.sophos.com/products/free-tools/sophos-anti-rootkit.html

http://free.grisoft.com/doc/39798/us/frt/0

EMAIL SECURITY AND SAFETY.

Security: Email Safety

Email can be used to transmit malicious software - viruses, worms, and Trojan horses - that can corrupt, delete or record data and interfere with your computer operations without your permission or knowledge. Some can even allow users to control your computer remotely, compromising confidential or personal information. It is critical that you remain alert to the possibility that any email can carry viruses or other malicious programs and take the following steps.

Never accept unsolicited email attachments. If you don't recognize the sender, consider deleting the email; if you do, never hesitate to contact the sender to ask about the attachment before opening it.
Likewise, do not send attachments unless absolutely necessary.
Do not click on links in emails, especially when the email is unsolicited. Sometimes the underlying URL is different than what it appears to be in the email. Phishers gather account and other personal information by directing their intended victims to URLs that appear to be legitimate. Even if you think the email is valid and feel that you must check out the link, never click on the link in the email. Instead, copy and paste it into your browser.
Never transmit information you consider to be private by email. You should not put anything in an email that you would not put on the back of a postcard. Emails are easily read by others other than the intended recipient.
Avoid spam as much as you can. Do not reply to it - even if there is an unsubscribe option - because you are only confirming that they have found a real address. Use a free email account address when filling out web forms.
Limit access to your email address.
Use free accounts that you can stop using at any time.

What are criminal websites?

Dodgy websites come in many shapes and sizes, including:

Phishing sites that try to steal your identity.
Fraudulent online shops.
Tempting sites that contain viruses or spyware.
Sites that (unexpectedly) contain illegal or pirated content.
Sites that promote worthless investments or get-rich-quick schemes.

It is very easy to clone a real website and criminals can use virus-infected computers to host a dodgy website so it costs them nothing to put it up. It doesn’t take a skilled developer long to produce a very professional-looking site.

What is phishing?

Phishing is a scam where criminals send emails to thousands of people. These emails pretend to come from banks, credit card companies, online shops and auction sites as well as other trusted organisations. They usually contain a compelling but bogus reason to go to the site, for example to update your password before your account is suspended. Victims click on an embedded link in the email itself which takes them to a website that looks exactly like the real thing but is, in fact, a fake designed to trick victims into entering personal information such as a password or credit card number.

Risks

Identity theft.
Fraud.
Theft from your bank account or credit card.
Virus infections

How to spot a 'phishing' email

Criminals can make an email look as if it comes from someone else. Fake emails often (but not always) display some of the following characteristics:

The sender’s email address doesn’t tally with the trusted organisation’s website address.
The email is sent from a completely different address or a free web mail address.
The email does not use your proper name, but uses a non-specific greeting like “dear customer.”
A sense of urgency; for example the threat that unless you act immediately your account may be closed.
A prominent website link. These can be forged or seem very similar to the proper address, but even a single character’s difference means a different website.
A request for personal information such as user name, password or bank details.
You weren't expecting to get an email from the company that appears to have sent it.
The entire text of the email is contained within an image rather than the usual text format. The image contains an embedded hyperlink to a bogus site.

How to spot a fake website

We recommend that you install the latest version of your web browser. Internet Explorer 7 and Firefox 2 both have sophisticated filters that can detect most fake websites.

Here are some other clues that might give away a fake:

Use your instincts and commonsense. If it smells bad, it’s probably rotten.
Look for evidence of a real-world presence: an address, a phone number, an email contact. If in doubt, send an email, make a phone call or write a letter to establish whether they really exist.
The website’s address is different from what you are used to, perhaps there are extra characters or words in it or it uses a completely different name or no name at all, just numbers.
Right-clicking on a hyperlink and selecting “Properties” should reveal a link’s true destination – beware if this is different from what is displayed in the email.
Even though you are asked to enter private information there is NO padlock in the browser window or ‘https://’ at the beginning of the web address to signify that it is using a secure link and that the site is what it says it is (see Learn about secure web pages).
A request for personal information such as user name, password or other security details IN FULL, when you are normally only asked for SOME of them.
Although rare, it is possible for your computer to be corrupted by viruses in such a way that you can type a legitimate website address into your browser and still end up at a fake site. This problem is known as 'pharming'. Check the address in your browser's address bar after you arrive at a website to make sure it matches the address you typed. Subtle changes ('eebay' instead of 'ebay' for example) may indicate that your computer is a victim of a pharming attack.

Avoid dodgy sites

Avoid sites that hype investments, whether in shares or alleged rarities like old wine, whisky or property. Do your homework and always get professional advice before making investment decisions.
Be wary of sites that promise easy profits. If it looks too good to be true, it probably is. Be particularly sceptical of schemes that involve the recruitment of others, receiving money for other people or advance payments.
Do a web search to see if anyone has had any problems with a suspicious-looking website.
Don’t judge a website by its appearance. It is easy to create flashy, professional-looking sites and it is easy to steal other people’s web pages and designs.
Be wary of websites that are advertised in unsolicited emails from strangers.

Other ways to protect yourself

Never click on a link embedded in an email. Always enter the real address yourself by typing it into the web browser.
Consider using a spamemail filter that will detect and block many fraudulent emails (see Stop unwanted email).
Be wary of hoax emails and advance fee fraud emails (see Don't fall for online fraud).
This kind of fraud also takes place over the telephone and in person. Be wary of social engineering in any form (see Don’t let conmen trick you).
Don’t give out personal information unless you initiated the contact and you are sure you know who you’re dealing with.
If in doubt contact the bank or website owner direct by telephone or email

SHOPPING SAFELY ON THE INTERNET:-

USING YOUR CREDIT CARD. There are now a range of Pre-Paid debit cards that mean you don't have to give any bank details.They are becoming more widely accepted and are ideal for small purchases and websites you have not used before.There are fees attatched but your savings may well outweigh these. Here are 2 comparisonsite:-

http://www.moneysupermarket.com/cards/cardsresults.asp?Feature=Prepaid

http://www.moneyextra.com/cards/prepaid-cards/index.html

Some now argue that it is actually safer to buy online than buying over the phone or handing your credit card over to someone in a shop. This is because if the online payment is handled properly, your banking details will be "encrypted", which means they cannot be viewed by anyone other than those handling the transaction - usually the banks.

If you're still unsure, Card Watch, a banking group that works with the police and retailers to stop credit card fraud, offer the following "top ten tips" when buying online:

1. Make sure your web-browser (that's the software that you use to view websites, most commonly Internet Explorer or Netscape) is set to the highest level of security notification and monitoring. These options are not always automatically activated when your computer is set-up, so check your manual or the "Help" option.

2. Check that you are using a recent version of your web-browser, as they often include better security features. Up to date versions can be downloaded free from the Microsoft or Netscape websites. If you have a different browser or use on-line services such as AOL or CompuServe?, contact your ISP (Internet Service Provider) or software supplier to find out how to activate their security features.

3. Before purchasing from a website, make a record of the retailer's contact details, including a street address and landline phone number. If these details are not available on the website, consider going elsewhere to buy. Do not rely on the e-mail address alone.

4. Do not enter personal details unless the security icon is displayed (this is a small padlock that normally appears at the bottom of your browser when you begin your transaction over the internet). You can click on the padlock to see if the retailer has an encryption certificate. This should explain the type and extent of security and encryption it uses. Only use companies that have an encryption certificate and use secure transaction technology. The address of the page where you enter personal details should also start https://.

5. If you have and queries or concerns, telephone the company before giving them your card details to reassure yourself that it is legitimate.

6. Print out your order and consider keeping copies of the retailer's terms and conditions and return policy. Be aware that there may well be additional charges such as postage and shipping. When buying from overseas, always err on the side of caution and remember that it may be difficult to seek redress if problems arise.

7. Check statements from your bank or card issuer carefully as soon as you receive them. Raise any discrepancies with the retailer concerned in the first instance. If you find any transaction on your statement that you are certain you did not make, contact your card issuer immediately.

8. Ensure that you are fully aware of any payment commitments your are entering into, including whether you are instructing a single payment, or a series of payments.

9. Never disclose your card's PIN number to anyone, inlcluding people claiming to be from your bank or the police, and never write it down or send it over the internet.

10. If you have any doubts about using your card, find another method of payment

General Advice on internet shopping.

The proof of the web’s success is the fact that so many traditional ‘bricks and mortar’ stores have also opened up an online division. For some, the websites deliver just as much revenue as an entire department story on a busy high street. Leading stores are now forcefully pushing online sales.
Another advantage of online shopping is that if you buy online you can get discount prices and free delivery – which you wouldn’t get if you had taken the trouble to go into the shop itself.
However, there can be a few ‘hidden’ costs like packaging, postage and even customs duty if you are buying from abroad.
Internet shopping is done with a debit or credit cards, or, on auction sites like Ebay, through proprietary financial accounts like PayPal? for which you have to register and may have to give your bank details.

Security

Despite the apocryphal stories, there are extremely few reported instances of credit card fraud in which data has been taken while making an online transaction with a reputable website. But please note the word ‘reputable’; once you start moving away from established brand names or companies with a proven track record, you may be putting yourself at additional risk.
But that would apply just as much if you went into a back street store and let them take your card into another room before running it through the payment machine.
Look for a padlock or unbroken key at the bottom of the browser window when you’re typing in your credit card number. These symbols mean the information you are sending is encrypted and can’t be read by other iInternet users.

You should also check that the site’s address in the payment section begins with’ https,’ meaning the site is safe, offering both encryption of information as it traverses the network and authentication of the server.
Never send your credit card details in an e-mail, and only pay by debit card when dealing with stores you can trust. Credit card companies often – but not always! – offer insurance cover for customers who fall prey to fraudulent websites. Read your credit card statement every month and contact the card company immediately if anything looks wrong.
Keep a printed copy of all records relating to any transaction you make. It will help you remember what you ordered and when, the goods’ delivery date and reference number and so on. Some sites, like Amazon, allow you to keep track of your orders and offer history of your purchases.

Returning items

Sending unwanted items back to the retailer is sometimes more costly than when buying from a high street shop because it involves repacking the goods and paying postage (and tax and duties if mailing to outside the EU).
However, your consumer rights entitle you to a 'cooling off' period during which an order can be cancelled without any reason and a full refund made. You are also liable to a full refund if the goods or services are not provided by the date you agreed. If you didn't agree on a date, then you are entitled to a refund if the goods or services are not provided within 30 days. But these rights only apply when buying from a company based in the UK.

Your rights

The rights of an online shopper are very similar to your rights as a high street consumer. They entitle you to:

clear information about the goods or services offered before you buy
written confirmation of this information after you have made your purchase
a 'cooling off' period during which an order can be cancelled without any reason and a full refund made
a full refund if the goods or services are not provided by the date you agreed. If you didn't agree on a date, then you are entitled to a refund if the goods or services are not provided within 30 days.
But be careful if buying on an online auction site because they can refuse to accept responsibility for the quality of the goods they auction. For auction sites, make sure you read the Terms and Conditions very carefully. You can download printed guides to ‘Shoppers’ Rights’ from the Office of Fair Trading website