Version: 2008
Advanced Search
advertisement
advertisement

Forum display:

Community Newsletter: Q&A: 3/04/05 New broadband subscribers: do's and don'ts

by Lee Koo (ADMIN) Moderator - 3/3/05 1:54 PM
advertisement
Post 1 of 46

3/04/05 New broadband subscribers: do's and don'ts

by Lee Koo (ADMIN) Moderator - 3/3/05 1:54 PM

Thanks you Dana and everyone who participated in this week topic. I encourage all of you who have more suggestions, or questions regarding broadband security to post below. The more information that we share, the more we can all learn from each other as a community.

Thanks again everyone!

-Lee Koo
CNET Community


Question:

I'm relatively new to surfing and so on. I'm about to upgrade to ADSL from dial-up. I'd like to know what I need to do to protect my privacy and my PC from malicious invaders and viruses. I'm currently using Norton but feel it won't be enough once I've converted. Secondly, how safe is it to give out private information, especially banking or credit card details to sites that request such information for verification purposes only and not for billing? Are these sites legit? I'd really like some feedback regarding these issues, especially on Internet security. Thanks!

Submitted by: Steven V.D.M.


Answer:

Hi Steven:

Your concerns about Internet security are valid, and I am sure this question will draw a lot of responses as well as controversy about the exact methods to accomplish your goals. I am concerned about your comment regarding giving out credit card information for verification purposes only. I don't recall any Web sites that require giving credit card information just to verify who you are. Verification using your e-mail address, usernames, and established passwords are the norm. I would not give anyone my credit card information, unless I intentionally went to their site to purchase something and even then only if I am familiar with them.

In my opinion, there are several steps as well as general guidelines you should follow to reduce your exposure while surfing the Internet. Note: The only way to be 100 percent protected is to not use the Internet at all. Please keep in mind that whole books are written on this subject, and I don't intend to cover the details of each and every aspect, nor step-by-step instructions...

HIGH SPEED INTERNET CONNECTIONS

1. Router - Regardless of who your internet service provider is, your first line of defense is to install a Router between your CABLE or DSL modem and your computer. Some companies now provide a modem with a built-In router, so check your manual for details. You can purchase a basic router for as little as $30. Even better, would be what they call a Firewall Router (Router with built-in firewall) which can run $50 or more.
2. Router Settings – Always change the default factory username and password to access your router. Depending on the type of router you have, there could be additional security settings within the router that you may want to change..
3. Wireless Router – If you are planning to go wireless and have purchased a wireless router, you should be aware that the factory settings have no security at all and need to be changed once the system is up and running. Anyone driving by your house can access your connection. At the very least, I would change the router password, enable WEP encryption and MAC filtering. (I will save this for another time)

CREDIT CARD TRANSACTIONS

1. Protected Accounts - If you plan to purchase goods and services online, I would recommend setting up a special online account such as PayPal.
2. Using a Single Card - If you prefer to use one of your current credit cards, set aside a single credit card for all online purchases. Don’t use that card for any other transactions except online. It will be a lot easier to spot errors and fraudulent charges if it is not filled with normal everyday charges.
3. Fraud Protection - Use a credit card that comes with some form of fraud or online purchase protection. (check your credit agreement).
4. Low Credit Limit - Select a credit card with a lower credit limit. Having a credit line of only a few thousand dollars opposed to $18,000 can reduce your potential liability.
5. Purchase From Know Companies - I know it is hard to resist, but I would suggest only purchasing from known companies or ones that have been recommended to you.
6. Do not Respond - I would strongly advise against giving credit card information to any unsolicited websites (pop-up ads or email solicitations).
7. Avoid Following Links - If you want to go to Borders to purchase a book, type their web address in directly, instead of following an unknown link contained within an email. It could take you to a fictitious site that looks just like the original.
8. Spelling Errors - When typing in the address to a website, double check your spelling. Some fraudulent websites take advantage of common misspellings and may look just like the real thing.
9. Common Sense - Use your common sense. If it seems to be too good to be true? … Well, you know the rest of the line.



USERNAMES AND PASSWORD


1. Do Not Save your Passwords - I know it is not as convenient and a real pain, but never store or save your usernames and passwords for anything. Always type them in directly each time. This especially goes for any form of online banking.
2. Create More Difficult Passwords - Be more creative with your passwords, avoid using easy to guess things like your name, birthday and child’s name.
3. Use Numeric and Alphanumeric - Passwords are harder to break if they contain both numbers and letters.
4. Don’t use the same Password - Avoid using the same username and password for everything. Mix it up as much as possible.
5. Change your Password – You should change your password as often as is practical.

EMAIL ACCOUNTS

Separate Email Accounts – I always suggest setting up an extra email account for yourself to be used for all online activity. Most internet service providers such as AOL, Comcast, Verizon and MSN allow you several free email addresses. Use one email account for friends, family and business (the emails that you really care about). Use the other account for all other activity such as registering your computer, software registration, subscriptions to forums and online purchases. Each time you submit you email address online, you have the potential of it getting on some spam list. This can help you keep the flood of email somewhat organized and worse case, if it gets completely out of control, you can delete the account and start over without the hassle of changing your main account.



EMAIL SETTINGS

Depending on what email program you are using, you can change the way email is handled to reduce the likelihood of contracting a virus.

1. Receiving Attachments - You can change the settings to prevent attachments that may contain viruses from downloading. This can be a problem if you regularly receive attachments because you may not be able to open them.
2. Opening Attachments – The majority of problems come from opening attachments. Do not open any attachments unless you know the sender and even then I would not open them unless you were expecting it.
3. Displaying Email - I would recommend changing the settings to not show you the contents of an email until you double click on them.
4. Downloading Pictures– You can also choose to be prompted before downloading pictures within emails instead of displaying them automatically.
5. Junk Mail – Explore the options for filtering spam so that you can automatically move them to a spam or junk mail folder. If you wish, you can have them deleted, but I prefer to brief through them to check for the few real emails that may be misdirected.


PERSONAL INFORMATION

1. Never give out personal information - I would never give my social security number to anyone. The same goes for account numbers and passwords. If someone called you on the phone, would you give them this information? So, why would you give it to someone on the internet?
2. Be very careful of bank inquires – I received an email recently that looked very official. It stated that there had been some unusual activity on my bank account and that I should follow the link and enter my account information to verify. If it were not for the fact that I did not have an account with them, I might have replied and given some stranger all of my personal information.


SECURITY SOFTWARE

You are going to need some form of security software. There are numerous software packages out there for handling all forms of security from Virus protection to encryption. In most cases, unless you really enjoy diving in and learning all about it, I would recommend installing a single, self contained Internet Security Package that includes at the minimum, virus protection and a Firewall (ie. Norton, Mcafee, CA, AG). You can purchase each product individually and in some cases mix and match products from different companies to achieve the maximum protection, but you always run the risk of problems or conflicts between products. I prefer to make it simple, one product from one manufacturer. You can purchase all kinds of special software to hide your every move, permanently delete files, encrypt your files and even monitor your children. I am not that paranoid, but it is all available.


SPYWARE

I would recommend installing one of the many programs available to block and/or remove spyware. Fortunately, two of the best ones are available for download for free. Spybot and Adaware. There are also many other good ones out there.


INTERNET SETTINGS

1. Security Settings - You can change your security settings from within Internet Explorer, by clicking on TOOLS-INTERNET OPTIONS. There is both a security tab and a Privacy tab that you can use to customize your settings. Without getting into all the options, I would suggest experimenting with the various levels of protection and then surfing. If you find you are having problems you can readjust the settings. If you normally go to the same few sites you can add them to your trusted Zones. The privacy tab allows you to adjust how your system will handle Cookies. Some sites require you to accept cookies, but it all depends on your individual surfing habits. Again you can add common sites to Trusted Zones to override security problems.

Happy Surfing!


Dana H.
Wayland Computers
http://www.waylandcomputers.com

Submitted by: Dana H. of Wayland, Massachusetts

Post 2 of 46

Honorable mentions

by Lee Koo (ADMIN) Moderator - 3/3/05 5:38 PM In reply to: 3/04/05 New broadband subscribers: do's and don'ts by Lee Koo (ADMIN) Moderator

****Honorable mentions****

Answer:

Regarding Norton antivirus I say continue to use it if you feel it is doing the job. If you are unsure there are other programs out there that can do the job. McAfee, Trend Micro-PC-cillin are just a few well know programs. A web search of antivirus programs should bring up a list of manufacturers offering antivirus protection. Also, a large majority of these companies offers an entire suite of products which may include some or all of the following.
• Firewall
• Antivirus
• ID & Privacy Protection
• Email Security
• Web Content Filtering
• Anti-Phishing Protection
• Spam Blocker

To protect your machine from hackers I recommend you look at some of the manufacturers listed above and also do a web search. Zone Alarm is the program I use and I am quite satisfied with it. Once again let me emphasize that there are a host of products out there that may offer a singular solution (antivirus protection only) or an entire suite of solutions for you.

Now let’s speak about personal protection regarding divulging personal information over the internet. There are many phishing types out there. Below is a dictionary definition of phishing.

(fish´ing) (n.) The act of sending an e-mail to a user falsely claiming to be an established legitimate enterprise in an attempt to scam the user into surrendering private information that will be used for identity theft. The e-mail directs the user to visit a Web site where they are asked to update personal information, such as passwords and credit card, social security, and bank account numbers, that the legitimate organization already has. The Web site, however, is bogus and set up only to steal the user’s information. For example, 2003 saw the proliferation of a phishing scam in which users received e-mails supposedly from eBay claiming that the user’s account was about to be suspended unless he clicked on the provided link and updated the credit card information that the genuine eBay already had. Because it is relatively simple to make a Web site look like a legitimate organizations site by mimicking the HTML code, the scam counted on people being tricked into thinking they were actually being contacted by eBay and were subsequently going to eBay’s site to update their account information. By spamming large groups of people, the “phisher” counted on the e-mail being read by a percentage of people who actually had listed credit card numbers with eBay legitimately.

Some methods to help protect yourself against fraud and malicious attacks on your PC:

1) Never click on a link within an email
If you are unsure of the source of the email, you should not click on hyperlinks within emails that are apparently from a legitimate company. Instead, directly type in the URL in the Internet browser address bar, or call the company on a contact number previously verified or known to be genuine.

2) Use anti-spam software
This will help reduce the number of fraudulent emails you may receive.

3) Use Anti-Virus software
This will protect against trojan and worm attacks and can detect and delete problems before they contaminate your machine.

4) Set Up A Personal Firewall
Firewall's can monitor both incoming and outgoing Internet traffic from a computer. This can protect
the computer from being compromised, block virus entry and unauthorized entry into your computer.

5) Above All, Keep Your Software Updated (Antivirus, Firewall, etc.)
This is tantamount to ensuring you have done all you can to protect your system.

6) Always look for "https" and a padlock on a site that requests personal information
When submitting financial and personal information on the internet look for the locked padlock
On the internet browsers status bar or https:// at the start of the URL in the address bar. This does not guarantee that the site is secure but the lack of this is a definite indicator that web site is definitely not secure.
7) Keep your computer free of Spyware and Adware There are programs out there that can run against your system to search for spyware and Adware and remove it. Spyware and Adware are placed on your system and enable the intruder to monitor your internet activity. You don’t want this happening as it may cause you to be swamped with pop-up advertisements, etc.
8) Keep Yourself Educated About Fraudulent Activity on the Internet
This site may offer some assistance: http://www.usdoj.gov/fraud.htm
Hopefully this has helped clarify some of your concerns regarding internet security and protection. The first and foremost thing you should remember is protect yourself. If you receive an email and don’t know who it is from and it contains a link do not click on the link. Always remember the saying “it is always better to be safe then sorry”. Enjoy ADSL and your computer.
Submitted by: JoeV. of Highland, New York

***************************************************************************
Answer:

Welcome to the wonderful world of broadband!

First of all, I would recommend ditching Norton ASAP. While it's a well known brand and often comes with many computers (usually as a 30 or 90 day "trial" offer), Norton is a resource hog that has the bad habit of slowing the fastest machines to a crawl. I would recommend Panda Platinum Internet Security 2005. Panda tends to play nicer with many applications and catches and blocks anything the 'bad guys' would throw at you. Panda also updates at least once a day, often times more than once so you're always covered.

It also has a software based firewall similar to the one that comes with Windows XP, only IMO it's a better product. It's easy to configure and stops connection attempts in their tracks.

Now then, there's the question of adding a hardware based firewall/router between the PC and your DSL connection. It's generally a good idea to install one, but it's not mandatory. There generally are other benefits to adding a router/firewall to your system besides the protection factor. Many of them offer wireless access points as well as extra ethernet ports in case you get a 2nd computer or a friend drops by with his laptop and needs access. It might be a good idea if you plan on "roaming" around the house with a laptop to include one of these. DLink has some decent gear that's relatively inexpensive - around $50 USD.

Of course, your DSL provider may have a special "home networking" kit available. I find these to be decent (most of the time) and they generally provide decent support for their product. I've only had ONE less than satisfactory experience - and that was with the Earthlink home networking kit. The long and short of it - their support center is in India and communication was damn near impossible. Not to mention their menu system kept routing me to the wrong people. But that's a whole rant unto itself.

That generally should cover you from 99.9999% of external threats. The ones that are not covered are threats via e-mail or phishing/pharming scams or otherwise crooked sites. And this brings us to your 2nd question.

Unless you're in the process of purchasing something on the Internet, you should NEVER, EVER, EVER, EVER be required to give out a credit card number or other sensetive personal information. And if the site in question insists on getting that information from you, chances are fairly good there's something rotten in Denmark - and it's NOT the cheese. Chances are also fairly good that you can find at least 10 other sites that offer the same sort of content and won't be trying to borrow your identity or credit card number(s).

Many moons ago, there were several operators of "adult" sites that required credit cards as validation for a "free" trial access to their site. The argument was that in order to have plastic, you had to be at least 18 years old. And you can tell that to the guy who's dog got a platinum card. The reality of it is that it made it VERY easy for the porn site operators to start billing that card especially if the visitor didn't properly cancel his "trial" subscription. Of course, this makes a mess that some phone calls to the credit card company, to dispute the charge and have it removed.

MOST legit sites will NOT be asking you for your mother's maiden name, Social Security #, and credit card number(s) for validation purposes. Not even banking sites generally request that kind of information during inital setup.

Phishing is a technique that criminals use to try and rip you off by faking a bank's web site and having you log in under the pretext of "confirming your account" or some such jibberish. NO BANK in their right or left mind would ever have you do anything of the sort. The most obvious ones are those from banks you don't even have an account with. If, for instance, you bank with Bank of America and get a note from Citibank or some such, you're being phished. Your best bet is to report the incident to the bank/financial institution's fraud unit. They'll be happy to assist you.

"Pharming" is a relatively new technique that's a bit harder to spot.
Pharming is a technique where the bandits subvert DNS servers (the machines that direct www. mybanksite.com to "192.168.2.13"). They change the IP address to a server of their own where they can then gather your sensetive information so they can log into the legitimate site and rob you blind.

For what it's worth, Internet banking is cool and convenient - until something goes horribly wrong. Use it at your own risk.

More security recommendations:

1.) Get a "throwaway" freebie e-mail account - such as a Yahoo, Hotmail or G-mail account. Whenever you visit sites that are not really important and they need your e-mail address, give out the "throwaway" address. My regular e-mail account gets maybe two pieces of spam and other unwanted garbage per week but my throwaway gets a LOT of action that gets deleted.

2.) Get Firefox. It's more secure than IE. And it's not a bad little browser. Most sites you visit will show up just fine. However, on a positive note, most spyware won't find it's way onto your system.

3.) Read CNet and ZDNet often to be up to speed on things. Subscribe to newsletters if you don't already do so. Usually, if and when some new threat comes down the proverbial pike, you'll hear about it there first. Being informed is your best defense.

4.) If you want to buy something on the web, buy from a legitimate, known vendor. Go with a vendor that has a good reputation - such as Amazon.com and by all means use www.bbb.org - the Better Business Bureau's web site liberally to research a vendor you're doing business with before you click on the "commit" button. A little research ahead of time can save a LOT of headaches and heartaches down the road.

Submitted by: Pete Z.

***************************************************************************


Answer:

Steven:
Yours is a very good question for many people making the move to broadband. First understand that going to broadband means that your computer will continuously be attached to the internet so there are several things you need to do that are not necessary with dial-up. The first thing you can do to protect yourself, and many people don't think of this as protection, but turn off your computer whenever you are not using it. A computer not on is a computer not compromised.

I would take the following steps in this order:
1) Buy a good hardware firewall. A hardware firewall will keep outsiders from attacking your computer and can keep your computer from being a part of an attack on another computer system if you happen to pick up a trojan or a worm. You can buy just the firewall alone, or many units come in combinations of firewall and routers, which allow you to use several computers with one internet connection. When you set it up, take some time to change the default settings. Many people do not and that makes it vulnerable to attack. Change the IP address to something other than the default. Change the username and password to something other than the default.

2) Protect yourself from attacks from within your home. Install a software firewall like ZoneAlarm, Norton, Panda, or even use the Windows XP firewall. This will protect you from problems within your home network. Perhaps you have a desktop computer, a laptop, your wife or kids have their own computer. You may have several computers using this internet connection. If you or your wife or children swap or share files with colleagues or co-workers using USB jump drives, CDs, or diskettes, or download music or videos from the internet, worms or trojans can be introduced to your computers through this file sharing. A software firewall can alert you if something is trying to access your computer from any of the other computers in your home. If you have only one computer in your house, this is not so much of a problem, but the Windows XP firewall is free and fairly good, so enable it.

3) Install a good antivirus program and KEEP IT UPDATED! This will give you protection against virus, trojans,and worms that come in through your email or downloads.
The major virus players are McAfee, Symantec, TrendMicro, Panda, ect. that have good virus programs and often offered in combination with software firewalls and spam protection software. Many people have their opinions on which is the best product, but the point is USE ONE.

4) Install a spyware filter or blocker of some type. Lavasoft makes a good one that can be downloaded and installed free of charge called Ad Aware Personal SE. Spybot Search and Destroy is a good one and it is also free. There are others out there. Installing one, keeping it updated, and running it at least once a week will keep your computer free of spyware that can eventually steal personal information and make your computer start to act sluggish.

5) Spam filter. These are software programs that block the majority of spam from cluttering your email box. They can be set to various levels of protection and security. You will need to play with them a little so they don't block emails that you wish to receive, but it won't take long for you to find the proper settings. Installing a spam filter is not a necessity, but certainly there will be some point in time that you will want to use one as your email address gets pasted around to more spammers that salivate to fill your inbox with every conceivable advertisement and special offer. Check with your ISP to see if they already use a spam filter on your emails before they every get to your box. You may then not need to install one on your computer.

This leads me to the second part of your question. NEVER GIVE YOUR PERSONAL INFORMATION OR CREDIT CARD INFORMATION TO ANY EMAIL REQUESTING IT!! No reputable bank or credit card institution will ask you for your personal information via email. Not even if it is supposedly a verification of information they should already have.

I've offered you a summary of things to do to protect youself. Realize that this is only a summary. Each of the above steps is a little more involved but not really all that difficult to accomplish. Take the time to do each of the steps correctly and thoroughly, and you will feel a great sense of accomplishment knowing you did it yourself!

Submitted by: Steve S.

***************************************************************************

Answer:

Dear friend of C-Net,

this answer you will get from multitudes.

It is always good to upgrade to a higher speed.
The problems are always the same, but most people cannot know them because of the old Dial-Up connections. But just to make a point:
I had to spend a couple of thousand USD, not to count the time, because I did get a Virus when I still had Dial-Up. (there was no other connection here at that time).

1. If you get an ADSL you will get (or need) a stand-alone Modem.
Make sure with the supplier that the Modem works as a Hardware Firewall. I don't want to give any brands, as most of them do anyway. Just make sure.

2. Don't be a miser: DO purchase a Firewall-Software (Norton or McAfee, which I use successfully; or check with C-Net) Freeware is not the best.

3. From the same supplier (preferred to avoid mix-ups) get a good AntiVirusProtection. The same suppliers are recommended, as they have automatic updates, which you will not get from Freeware.
The automatic update is of utmost importance.
And do run the VirusScan once a week.

X. A word here about Freeware: The company ComputerAssociates (CA) is certainly a bona fide and good Software-Enterprise.
They offered me their Freeware for Virus-Protection.
That was very nice, but, and here comes the point: as Freeware they did not give automatic updates, and I virtually had to check 2 x a day, if there was a new *.dat - file.
If I did not do that, I would get their "latest" *.dat, but not the ones in between.
Please, see later.
This does not give CA minus-points, but they gave me Freeware, and it was up to me to take care to stay up to date.
I cannot blame them. They are right.

4. Unless you do not care about Spam, do install a SpamKiller (same suppliers).

5. As a matter of fact you can get from NORTON (SYMANTEC) and/or McAfee Packages for about USD 70.-- p.a. including automatic updates and additional features like Privacy Protection etc.
But as said before, choose one, it makes everything easier.
I like McAfee, maybe you prefer Norton, who cares, as long as the product is OK.

6. THESE YOU DO NEED at the moment you are connected through ADSL, as you are always "ON".
Therefore don't delay it.

7. Many people argue about the IE-Browser. They are nerds and only want to make a name for themselves.
The MS IE (always latest version {not beta} and always updated) is perfectly alright, fast enough and if you need more info go to Google, but don't install their Search-Bar, it can drive you crazy.
I have installed from WINFERNO the SECURE IE with PRIVATE IE.
This is a one-time purchase, but you get the settings to block (or allow) Pop-Ups, Flashes, and most important: you can control Active X - Controls. Always individually for each page you visit.
The SIE/PIE has saved me lots of time, and I don't have to watch all the Nudies.
(I am a man, but those things I don't like).
The PRIVATE IE -Part wipes your records, so that even Spyware cannot know, where you have visited.
It also informs you if a Spyware-Intruder tries to lay an egg, and, of course, you can block it.
If the PC is unattended, it does block these automatically.
I am very satisfied with this Appl.

8. Of course, you will have to download immediately the FREEWARE from LAVASOFT-ADAWARE and the SPYBOT.
Both do the same: they check, whether you have DATAMINERS in your system.
C-Net will confirm that it is recommended to use both.
But do not install more. There are hundreds of Freewares, but they only fight with each other.
These two are the Best of the Best, and don't fight.
The new "beta"-version of the MS seems to be quite alright, but it is a "beta"-version, and I would not install it as a beginner in "alwaysON".
I have installed it, and it creates a lot of un-needed hassle.
Stay with ADAWARE and SPYBOT and you are well off.

9. Important is that you keep ALL programs and apps. up to date, especially also the updates from MS-Windows. You can make a setting that you are automatically informed that "critical updates" are available. These should be installed by all means. MS has a very valid reason for that.
On top of that check every week via "Tools"-"Windows-Updates" and do install what is needed.
Not all is needed, but if it is not needed, it will also not be installed, its that easy.

10. THE MOST IMPORTANT TASK:
You have to install the above, or you will be THE VICTIM.
So, after you installed all the above go to a Web-Site www.grc.com
This site is not easy to navigate, but you will eventually come to the page "Port-Checks" or UPI.
Make both checks: i.e. "Common Ports" and "All Ports".
If the result is a) all ports in Stealth and b) all small squares in green you are well protected.
This is a free service, and I do it every two weeks, and to my delight --- all is green.
NOTE: To run these checks you have to dis-engage any "proxy-server". With Cable and/or DSL you usually have a proxy. In IE go to "internet-options" >> Connections >:> LAN.
If you find a proxy-server there, dis-engage it for the Port-checks, after that you can engage it again.

NOTE for C-Net: you should contact "grc" they are really Tops, and they like good counter-parts.

11. As I do not know your Operating System, I cannot know, whether you have this facility.
As I said, I run W2Kprof, and there I have a "Baseline Security Analyzer" which is a no-nonsense (strange for MS) Analyzing Tool.
If you can install it ( it is Freeware but does not come with the basic installation), do so and run it.
You will be surprised what you will see.
But do follow what is suggested, if possible. In Asia not all is available, that's MS again.

Probably other C-Net members were able to make better, or more correctly, shorter suggestions, but I stick to what I said, because it is based on (sometimes bitter) experience.

Keep up the good work, and best regards,

sincerely,
Harm

Submitted by: Frey C.

***************************************************************************

Answer:

Internet security is an important issue. Though dial -up is much slower than than the broadband products such as DSL and cable, the threats are essentially the same. I would think that the first step is prevention. Prevention goes a long way to stop problems from existing in the first place. I would break this into several key components.

1. Treat the websites you go to like strangers at your front door. Don't always except what you see as face value. If it seems to good to be true, it is.

2. Very little is free on the web without bringing a little friend along with it to spy one you or modify your computer.

3. Though firewall software works for the most part, it resides on your computer so stopping threats is occurring in your computer not outside. With the advent of physical firewalls and the fact that you are moving to broadband, gives you the option to install a physical firewall between your computer and the internet. They work pretty much like a security guard at your front door. No ones gets in unless you "say" or "click" with your mouse. A side benefit of this type of device is the ability to share this higher bandwidth to the internet with more than one computer. Few computer users ever consume it all with a single computer and at anyone time.

4. Having anti - virus software that is up to date and a good adware and spyware program will help keep your computer system out of trouble.

5. Maintenance - Take the time to keep your computer running well by at least defragging your hard drive.

6. Turn it off - shutting down your computer is a requirement not an election. Despite advances in the hardware area, there are still moving parts. From fans that keep your computer power supply and cpu temp down to hard drives that are spinning constantly.

Finally, consider all the above akin to policemen wearing body armor. While it protects most of you, don't go looking for trouble. You can get hit in the head and be dead. Stay away from Porn sites and websites with those irritating pop ups that tell you anything from free screen savers to your computer has problems. They are just leaders that beckon you into the trouble zone.
Kind Regards,
Submitted by: Bob A.
***************************************************************************

Answer:

Hi Steven,

These are very good questions, and I think that many people are still thinking too lightly about this !

The answer to your first question:
If you plan to upgrade to ADSL, you'll have to invest in a good firewall first! With ADSL you'll be automatically connected to the Internet when your PC is running. So you'll be continuously on-line. The danger in this is that the chance hackers and trackers will find your PC has increased significantly in relation to your previous situation, when you only start dial-up for sending e-mail or short browsing sessions. Hackers and trackers use probing-software that is continuously searching the Internet for 'leaking' computers with no firewall.

Microsoft's Windows XP (with service pack 2) has an internal firewall which is rather good to my opinion. If you're not running Windows XP or if you want to use another firewall, install a 2nd party firewall from Zone Alarm or any other company.

A good anti-virus protection, which is daily updated is vital for protection against viruses. You can choose to invest in the highest protection level and purchase a new anti-virus program, but maybe your Norton Anti-virus is still good enough.

Against malicious spy-ware, ad-ware, scripts (and Trojans and worms, which are not found by your anti-virus program) you might consider to install anti-spy ware programs such as Ad-Aware, Spyware Blaster, Spybot Search&Destroy. Also Update them regularly and run them at least once a week!

Last but not least: very important is to update your Windows at Microsoft's update center. On regular basis Microsoft brings out fixes, patches and service packs for bugs and security problems in there software which are found by users and professionals. So this is very important that you stay up-to-date with this issue! All Windows-versions have an auto-update feature which should be activated somewhere in the Control Panel usually.
Firewalls, anti-virus programs and anti-spyware programs are downloadable at C-Net's www.download.com.

The answer to your second question:

Never, and I mean NEVER give private information such as you address, e-mail, banking or credit card numbers for any purpose to a website which you do not know or do not trust for 100 percent! Better stay away from websites that are offering free stuff and so for filling in their web-form or answer their e-mail. Better stay away from this. This is a way how spam starts, and your e-mail inbox will be flooding with spam soon!

In some cases you can trust websites from companies that have a good reputation. Maybe you can ask your credit card company or VISA what their policy is and if they have al list of legit websites.

I'll hope to have helped you with useful information and good luck.


Submitted by: John V. of Woerden, The Netherlands

***************************************************************************

Answer:

I am not going to give you a long explanation. Just install these programs, most of which are free, and your computer will be pretty much bulletproof to the Internet. They operate together to create a 3-wall defense system:

Level 1:
AVGFree 7.0 Antivirus. www.grisoft.com Much better than Norton.
Zone Alarm Firewall www.zonelabs.com

Level 2 These 2 program are for auto-checking and cleaning any ad or spyare that gets through your firewall.

Spybot http://www.safer-networking.org/en/home/index.html
Adware SE Personal www.lavasoft.com

Level 3: Personal Inspection of what is running on your computer: These 3 programs overlap somewhat in functions, but each one does something different or better than the others. They let you see what your computer is doing so you can identity and remove anything that got by your first 2 levels of defense.

Process Explorer www.sysinternals.com
Win Patrol www.winpatrol.com .
Easy Cleaner http://personal.inet.fi/business/toniarts/ecleane.htm

Now as to your question about sending data to the internet. Here is what I do. I have 2 accounts in the same bank, an internet bank. One is a checking account with Visa debit card and billpay (for sending checks), and the other is a money market account (MMA). I keep about $10 in the checking-Visa account. (My bank does not have a monthly service charge no matter the balance so this doesnt cost me anything.) Because of the low balance, any charge over $10 to that account will bounce. I never use the MMA account for anything: it doesn't have a credit or debit card, and I never send its data out anywhere anytime by any means, and I don´t write checks on it. Its only outlet is to the checking account. Thus it is as hidden as it can be.

Whenever I am going to make a payment with the Visa or bill pay, I transfer the required amount from my MMA to the checking. This takes about 3 minutes on the internet. Through this method, I, in effect, authorize each charge to my card by making the transfer. Anybody trying to charge my card will get a charge bounce. My window of vulnerability is usually only an hour or so between my deposit and the authorized charge, and then only up to the amount of the transfer to cover that charge. This system also negates identity theft as they aren´t going to get any money out of me.


Submitted by: Tom P. of Oaxaca Mexico.

***************************************************************************

Answer:

Answer:
Let me start by saying that to deal with the increasing world of viruses, hackers, spam, spyware and other stuff going around the web you will need to install some specific software that will help to minimize the risks.

The basic security combination recommended by almost all specialists is:
(1) use up-to-date antivirus software to detect and remove virus threats.
(2) have an effective firewall to protect against hackers and stop unwanted intrusions.
(3) have reputable antispyware tools to detect and remove adware, trojans, dialers, and other spyware threats.
(4) insure security patches are always current to insure new patches are installed on your computer before threats can reek havoc
(5) refrain from unsafe browsing habits or risky online behavior. “Never" ever downloading anything from an unreliable source or downloading anything that you are not expecting.

On the market you will find a lot of dedicated software that will help you in the process of preventing for being infected or attacked. This software falls into to general categories: freeware and paid software.

You mentioned you are using Norton, but not specifying if you are using Norton Antivirus, Norton SystemsWorks, Norton Internet Security (includes a firewall protection) or all of them. Norton is a top of the list brand and the combination of Norton SystemsWorks (which includes Norton Antivirus) and Norton Internet Security will provide a good basic protection.

But you will need to be protected also against the other stuff. On this matter you will find that Lavasoft's free AdAware tool is a very good alternative. Spybot Search and Destroy is probably one of the most popular 'free' antispyware utilities on the market. Both Spybot S&D as well as AdAware are considered reputable free programs by most cyber security specialists who recommend free programs. Combined they perform a very good job if do not want to pay for detecting spyware software.
If you want to pay for protection on this matter Spysweeper is probably among the best alternatives, providing good protection and being very easy to use.
If you look for a free firewall probably ZoneAlarm is a very well known free firewall. If your OS is Windows XP Pro the firewall included in it is also a very good alternative mainly if you have installed SP 2.

Regarding providing personal information I will personally recommend you to visit www.scambusters.org where you will find of a lot of very good information and advises on this subject. They also issue a weekly free bulletin, sent by e-mail, providing good news about what is happening on the web and the risks a cybernaut is being exposed to. Basically never ever provide personal info unless you need to, if forced to do it look if the browser shows that you are connected to a safe site (watch the “s” included immediately after http letters, this means you are surfing a protected “safe” site), also watch that you are directed to the site you want to visit, in case of doubt call to ensure the address is correct and the one you are looking for.

Sorry for being so long.
Hope it works.

Submitted by: Alberto S. of Buenos Aires, Argentina

***************************************************************************

Answer:
Not to be "smart", but, the main thing is to use plain Common Sense !

Firewall and anti-virus programs are an excellent start and a necessity to help keep you safe online. But keep in mind that if you "invite" potential viruses and malicious applications into your computer, they will be a mute point. That includes opening attachments from unknown senders and downloading potential threats from the Internet such as .exe and .zip files.

Also make sure that the settings are correct for your firewall and anti-virus programs. In general, "medium" is good for your firewall - it allows you to surf and access most websites. Take the time to check what each available setting available means. Don't hesitate to click on the help button - Norton / Symantec has a great knowledge base to help you and find answers to your questions.
Most IMPORTANTLY, KEEP THEM UPDATED !!! Run a virus scan at least weekly to check your computer for suspicious items. Download the updates available to keep your protection current. New viruses and malicious programs come out daily ...

Another hazard to consider is spyware / aware that can be loaded onto your PC. There are two Free programs available that are excellent. "Ad-Aware" and "Spybot Search and Destroy". These can be downloaded at the download.com website. Again, keep them updated. ( Think about it, do you usually use products that are past their expiration / use by dates ? - No, you want things as fresh as possible so check if there is a newer version you can obtain ! )

Another valuable resource is the website pcpitstop.com. You can have your computer scanned for problems (FREE). The scan checks your security settings, looks for known spyware / adware, and tells you the general health of your computer. You can / will learn many things from that site.

As for your second question, NEVER give out private information about yourself to websites. If you are making an online purchase, make sure that there is a little padlock on your taskbar. That tells you that it is a secure website. A "https" address in the address bar informs you that it is "safe".

As to " Legit sites " ? Possibly, but you never know. In general would you give out personal information about your credit cards and bank to total stranger ? When in doubt, Don't do it !!!
* A "new" scam is called SPOOFING. You receive an e-mail asking about your bank / credit details with a link to confirm information. If you click the link, it looks Exactly like the site you Think it is ( such as PayPal and Ebay ) but it is NOT the actual site - you are redirected to a "spoof site" -
a twin look-alike that will graciously accept all your details and then have access to your life !
You do not get e-mail from companies asking you to confirm your private information - if you think it might be "real" - do Not use That link, go to the website, login, and if it is real, you got there on your own - not from the rather anonymous link. ( Login & Password is a safeguard for you )

Yes, use common sense when you are online ALWAYS !!! That is your number one protection !


Submitted by: Mary F. of East Chicago, IN

***************************************************************************


Dear Stephen,

You made the first step towards protecting yourself by realizing that Anti-virus software isn't enough. It takes vigilance and multiple processes to protect your computer and your identity while surfing the web. First, before you go out onto the web, activate Window's XP Internet Connection Firewall (assuming you have XP) and make sure that all your security updates have been installed. Make sure your Norton is up to date and run it. Don't go surfing until you do.The next step is understanding malware, what it is and how to protect yourself from each.

Malware are trojans, spyware, viruses and spam. Excellent articles and discussion forums on the differences of each and how to prevent them are available from CNET's sister sites, ZDNet and TechRepublic. Make them your next web sites to visit. The time you spend understanding these and taking steps to protect yourself, the less time you'll spend undoing the horrors that! malware can perpetrate on your computer. Next, check with your ISP. Many will provide free anti-virus scanning for your email, pop-up blockers and other programs that will work well with their system. Use them. If they don't, get a pop-up blocker, Spybot, and Lavasoft's Ad-Aware. The latter two programs are for removing spyware and adware. Ad a spam-blocker to the list. Use them regularly. ZDNet and TechRepublic are also a resource for getting these programs and learning how to use them.

While Norton is a good program, as with any AV software, it's only as good as you are about making sure it's updated. Norton has a suite of programs that includes a firewall, which is your next step. I personally prefer Grisoft's AVG Anti-virus software over Norton since it doesn't slow down your system as much, gives you quite a bit of flexibility and control, costs less, and updates itself daily. I also use ZoneLabs ZoneAlarm Pro ! as my firewall, in addition to XP's firewall. As with any firewall you need to know how to configure it. Read the user's manual. Both AVG and ZoneAlarm have free and pay-for versions.

If your ISP provides you with the ability to have more than one email address. Give yourself an email address for surfing and one just for your family, friends, work, etc. If the surfing one gets compromised by spam or anything else, it's easy to replace it.

The safest way to keep your computer free of malware is to make sure you have your software updated, you are using it, you don't download anything that comes from a pop-up and that you keep yourself up to speed on the latest threats.

With regard to your last question, about giving out information. Both the FTC and the Better Business Bureau will tell you NEVER EVER give your information to any site unless you are purchasing something. No reputable site will ask for ! your Social Security #. And, ONLY purchase something from a reputable and well-known site that uses SSL (when you're buying or providing information you see the little lock at the bottom right of your browser). No reputable bank or institution will ask for personal information over the web. This is where Phishing scams start and how many have their identities stolen. Identity Theft is the number 1 white collar crime in the nation and it's growing. Visit both the BBB and FTC sites to understand and learn how to protect yourself from IDTheft. It's safe to download materials from their sites.

I know this seems like a lot to do, but in the long run the investment of time and education really pays off. My computer has been running fine and malware-free for more than 2 years. You can surf to your hearts content, use e-commerce regularly, and enjoy all the web's great content,,,and be safe. It's up to you.

Submitted by: TJ T. of Cincinnati, OH


[Edited by: admin]

Post 3 of 46

Browser Option

by Thorobred - 3/4/05 3:08 AM In reply to: Honorable mentions by Lee Koo (ADMIN) Moderator

Hi, now that you'll be connected all the time, it might be a good time to consider another Browser. I run a Computer shop and everyone who uses broadband has problems with pop-ups. Avant Browser is a free browser with pop-up control, Ad-filtering and many other excellent features. It lets you know when you are entering a secure site by displaying a small lock in a bar that is located on the bottom of the browser.
Also, in that bar is a pop-up counter that will keep track of how many pop-ups you have been protected against. It also uses google as a search engine. This will not stop pop-ups from IM programs but, it will protect you from websurfing. http://www.avantbrowser.com/
I won't go into the anti-virus, spyware and firewall topics as everyone else has covered those thoroughly. I just would like to mention the new Microsoft Antispyware is very good and free.

Post 4 of 46

Another great option

by Orion_ - 3/4/05 4:48 AM In reply to: Browser Option by Thorobred

You can also use Mozilla Firefox, a hugely popular open source web browser with tabbed browsing, low memory consumption, pop-up blocking and more! You don't even get spyware trough this browser! This web browser is recommended by many internet security companies.

Post 5 of 46

Another browser option

by Carolal - 3/6/05 9:33 AM In reply to: Another great option by Orion_

When I switched to cable broadband I began having so many annoying problems with Internet Explorer that I switched browsers - have used Firefox & like it well enough but have thoroughly settled on MyIE2...Along with the Windows firewall, MyIE2 & Spybot not enough stuff gets through to be a problem whatsoever...I might go for a router at some point but for months now things have been just dandy... :)

Post 6 of 46

Here is a conundrum

by randombox - 3/4/05 1:17 PM In reply to: Honorable mentions by Lee Koo (ADMIN) Moderator

I am a long time broadband cable customer and I finally switched voer to DSL. The DSL came with a Modem/Router/WiFi hardware. I have always heard how great a "HARDWARE" {physical} firewall was when compared with a Software firewall.
But now I am finding out otherwise!
You see: I was advised from the get-go that I should uninstall my {SW firewall} ZoneAlarm to prevent any conflicts with the HW firewall. DSL provider provides no tech support if both SW+HW firewalls are utilized!
But without using a SW firewall, the DSL-connected computer is provided with ZERO outbound protection (aka; outbound/egress filtering). Short of using a Parental Control software, I am not able to find an alternative solution to a full-bore SW firewall installation.
Any help?

Post 7 of 46

CHANGE YOUR DSL ISP!

by kengrush - 3/4/05 5:21 PM In reply to: Here is a conundrum by randombox

I don't know who your ISP is, but there is serious reason to ditch them if they told you you couldn't have both a software firewall on the PC and place a hardware modem/router/firewall between your PC and the telephone jack. To the best of my knowledge, THAT IS TOTAL RUBBISH! However, it may be necessary to "disable" or even temporarily uninstall the security software to install and configure the harware. Nevertheless, IMMEDIATELY reinstall the software before using the new broadband modem/router/firewall. You list one very good reason for this, but there are others such as privacy control on outbound material as well. Also, no firewall is 100% effective, and two layers are better than one.

I have Verizon DSL and have used progressive versions of the Norton Internet Security (NIS) suite both initially, when they only offered an ADSL modem and I interposed a NetGear router/firewall between the modem and the PC, and currently, since they have provided a wireless/wired modem/router/firewall combination (free with a contract). The NIS suite Personal Firewall component added the router's IP address to it's trusted zone. I may have uninstalled and reinstalled the suite to do this, but I think it picked it up on it's own. In any case, the router installation gives you the IP address and subnet mask, which could be manually entered into the personal firewall. I recall the process as being relatively painless.

If your ISP isn't helpful, demand to speak to a tech suport supervisor or 2nd or 3rd tier tech and threaten to cancell the service unless they help. A perfectly satisfactory workaround (not free) would be to make them take the combo unit back and to just give you a DSL modem. Then buy a separate Wi-Fi/wired router/firewall and place it between the modem and the PC. Linksys, NetGear, and ?DLink have received good reviews, all having NAT stateful packet inspection, but I have discovered that Linksys DOES NOT "stealth" all PC ports. A firewall can "close" or allow "open any of the myriad ports on your PC, but in either case, a "ping" form the outside is answered (allow or deny entrance). With steathing, NO answer is given, so your PC is practically invisible from the web. See the "Shields Up" website of Gibson Research Corporation <http://www.grc.com/> for a discussion on this and to test your total firewall effectiveness.

Hope this helps!

Ken Grush

Post 8 of 46

CHANGE Your ISP

by albartos - 3/4/05 6:06 PM In reply to: CHANGE YOUR DSL ISP! by kengrush

All great advice however--- Most DSL ISP's now demand a 1 or 2 year contract for any kind of decent rateso changing is not always an option. ALSO - Call Tech Support? Are you kidding. I use SBC -- :-( and believe me if your problem does not fit the pre written screens the forgien fellow onthe other end will run you in circles. I spent HOURS with these guys only to find out the solution was a smnall Internet Explorer seting change. I figured this out myself after a sleepless night. (I just kew the problem was not thet bad....)

OH -- and SBC continually told me to disconnect my router and connect the DSL modem directly tothe PC. ALSO they said if I were using any software firewall -- ie. Zone Alarm etc. that also would need to be disabled.

Waht a buncjh of yahoo's.

Al Bartos -

Post 9 of 46

About SBC

by JTHunter - 3/4/05 8:37 PM In reply to: CHANGE Your ISP by albartos

Hi Al,
The reason that the SBC people wanted you to disconnect your router is that if they try to "ping" you phone line to test it, the ping doesn't work correctly. Same for ZoneAlarm as it naturally runs in the stealth mode.
However, having worked for a sub-contractor doing call center help for SBC/Yahoo in St. Louis, MO, you are correct in about the "scripts" we were required to use. The problem is, if we DON'T use those scripts, we could get fired (like I did).

Post 10 of 46

Use both.

by tbcass - 3/5/05 4:02 AM In reply to: Here is a conundrum by randombox

You were wrongly informed. You should use both. I use both and have no problems.

Post 11 of 46

Other recommendations from members

by Lee Koo (ADMIN) Moderator - 3/3/05 5:39 PM In reply to: 3/04/05 New broadband subscribers: do's and don'ts by Lee Koo (ADMIN) Moderator

****Other suggestions from our members****

Answer:

Steven,

Let me start out by saying that "once you go broadband, you'll never go back". Your desire to go DSL and leave the dial-up on the phone where it is supposed to be is a logical step in enhancing your Internet-ability.

Now, about your topics.

When you make the switch to DSL, you will want to have the following in your arsenal: A very good Virus Scanner, A very good Firewall, and you can throw in a Privacy Protector and/or a Spam Manager (most ISP's nowadays have the Spam business as a perk).

You will want an anti-virus program that scans EVERYTHING coming in through your door. Even and especially your E-Mail needs to be scanned on entrance to your system, and on it's way out also. Just to make sure that you aren't bringing in any nasties or sending any out.

Now for the Firewall: this gem will run 24/7 just watching your ports, and what is coming in (or attempting to). They usually have a database of known "bad guys", and they are dynamic learners. If they aren't sure, they halt everything and ask you what to do before proceeding. Another neato aspect of a Firewall is that you can hide behind it, and your true IP Address will not be shown, so that no hacks can poke your ports or data I/O looking for an IP Address.

These, in my humble opinion, are the must haves and if you don't use them, you'll be visiting the doctor because of an STD on your hard drive. I suggest them even with dial-up; one cannot be too careful these days - and don't worry about taking a hit on speed by these programs running in the background; they're very cleverly stacked in the computer's memory during run-time, so as to avoid slowing your machine to a slug.

Now the biggie: The Internet and Credit Card Transactions. It's like this; only use your CC on well-known and trusted sites; try to limit your transmitting your CC to sites that have a Secured Server - you'll notice the https:// in the URL of the site. Use sites that participate in CC Fraud protection programs, such as PayPal, VeriSign are but a couple of agencies that guarantee that the site is safe and secure.

I myself feel that I should either have my CC memorized, or pull out the card physically and input the information (pick a card, any card) versus storing the number in some program just for convenience's sake. If you store it in a program, and you (God forbid) are compromised, then that data is on the hard drive somewhere and can be found. Just my theorem.

Now, what programs? Well, I suggest that you investigate, look at a few different software sales sites or catalogs, and pick out the top three that are always in all of these, and then do some comparative investigating. Myself, I'm a McAfee guy - I run VirusScan (whatever the latest version number is at any time) Professional, and I use their Firewall program, and sometimes their Privacy Protector program. (Mediator: I'm not advertising - I'm just sharing my own "beliefs" but with restraint) Symantec's Norton AV package is also very popular. Maybe look at a couple of pc magizines, or I think you could find how and where to make a very astute synopsis here on CNet.

What next? Buckle your seat belts - you're going for a ride. Enjoy the speed increase. Broadband from Dial-up is a real kick in the pants. Tally-ho!

Kind Regards,

Submitted by: Bill B.

***************************************************************************

Answer:

RE: changing from dial-up to ADSL and security.

I have been doing this for 3 (three) years now and each of my customers have been very happy with my suggestions. The security is all donation ware and I strongly promote the customer to donate.
There are 4 (four) apps to install on each (Windows ) computer regardless of version.
AVG virus scaning (free and donationware) has always cleaned up what Norton has failed to find.
SpyBot & ADaware again these are ether or , I prefer SpyBot, donationware and do a very good job WinPatrol donationware after SpyBot and AVG have done their thing This little puppy will alert of any furture infiltrations that pass the front lines.
ZoneAlarm This is a maybe as I rely on the router to do this job, and Zonealarm may cause a few hiccups during its stay.

My suggestions for what it is worth...

Giving credit cards over the net, only if you become annonymous, goto site of same name via Google.

These all have a short learning curve but, well worth the time and learning.

Ps
Another safe guard is use Opera or Mozilla Firefox and thunderbird for browsing and email. Opera also has a mail app.as well. This is because IE and Outlook express have a large internet target on them. The previous don't.

Submitted by: Walter B. of Maple Ridge
British Columbia Canada


***************************************************************************

Answer:

Steven,
Right now as you can see in the CNET Editor's reviews of Internet Security software, Trend Micro's PC-Cillin is on the top of the list for firewall and antivirus protection. Combined with the current Windows security updates needed for your version of Internet Explorer this works the best.

I do suggest a few other programs not just as utilities to help safeguard other aspects such as AD-Aware SE, Registry Mechanic, and System Mechanic Professional (being careful not to include System Mechanics Panda antivirus and Firewall due to conflicting Antivirus/ Firewall programs results would cause major connection deniability problems).

In PC-Cillin's security settings you will find a privacy protection option you can set a password as well. Note* though, if you ever want to sign up for something like a newsletter you will need that password to allow your personal information to be given out over the internet to bypass this. But in all aspects do your Homework first to know who you are sharing any information with first over the internet.

As for using credit card information over the internet, I suggest a few options,

1; VISA has a web site for setting up a special merchant verification ID number only you would know once they submit your purchase information. Visa will ask you for verification before allowing the merchant to process your information. NOTE *I have used this and this can slow down E-commerce dealings, especially ones done on a weekend or during normal business operating hours. So if there is something you want in a hurry do not use this method.
2; Another is setting up a PAY PAL account. Which I also have used and have had a few issues with timed order's.

3; Is direct Land Line connection by using web site contact information. Safest yet, but does not help with on line purchases that are for downloads only.

4; The one I use the most and is far best I have found for my small business is to set up with your local Bank or Financial Institution in advance who you are going to be dealing with on a regular basis and refuse any other POP purchase authorizations sent via Internet/ or other Merchant request without direct prior approval. Not all Banks offer such a service to individuals, but to someone who sets up a small fictitious business account with them they will offer it for free.

5; As a suggestion: Always look for a secure page notification on your browser window down at the bottom right. It will appear as a small paddle lock in the locked position. Double Click on it and see what they are using for secure means first and check to make sure it can be trusted.
I hope some of these suggestions help you. Internet business is expanding and yet extremely vulnerable to those who do not do their safe guarding first. Be knowledgeable of your Bank or Financial Institution's Policies on dealing with Internet purchases. See what safeguards they offer against unauthorized purchases, as well as what protection they provide you the consumer. Physical loss or theft policies are different than Internet theft or use policies, and you need to be aware of who is going to offer you the best protection as well as recovery of losses incurred due to theft or unauthorized use.

"In the wind...." John 3:8
~Bear~


Submitted by: Barry B.

***************************************************************************

Answer:

Howdy Steven VDM
I am now running ADSL and have Zone Alarm Pro for my firewall, NOD32 for my antivirus (less resource hungry as Nortons but more easy to customize and less invasive and just as reliable) WinPatrolPlus,(to protect my registry and startup) Spybot Search and Destroy (anti-spyware),AdAware SE (anti-spyware) Spyblaster (to immunize my computer from "bad"sites) IESpyad (again to stop me from accessing malware webpages) HijackThis,(to try and stop web site hijackers) and used the TechSupportGuy security suggestions to tighten security on my computer. This means I can't play games as easily, but for a mainly business and internet surfing computer, I need all the security help I can get.
As to handing out credit card banking information, I only deal with sites displaying the locked padlock symbol and so far, haven't had any trouble. I also do Google searches on site names in case they come up with a malware warning. No reputable bank or store will ask for your PIN numbers or passwords over the net. If they do, they aren't reputable at all.Make sure you print out a credit card receipt so you can check your card balance online (if you do internet banking) then you will know if it is being improperly accessed.I have made many online transactions and haven't had any trouble provided I check the secrity status in my task bar.
Good luck with ADSL. You will wonder how you managed without it!!
Regards
Submitted by: Paula F.
***************************************************************************

Answer:

It would be good to know what version of Windows you are using. First of all, let's get one thing out of the way. The only reason a dial up connection is more secure than broadband is because it uses a dynamic ip address as opposed to a static one which broadband connections use. That means that every time you log on with a dial up you are assigned a new ip address. So if a hacker somehow gets a hold of your ip address and you think someone is trying to hack you, just disconnect and then log back online. However, having a dynamic ip address does not mean that you do not need any protection because during the time you are online, you are just as vulnerable as someone using cable or DSL. The one good thing about dial up is that after a certain amount of inactivity, your isp usually disconnects you automatically. So if you leave your computer on and forget to log off, you will eventually be disconnected. This won't happen with cable or dsl. A broadband connection is always on.

A good firewall as well as a good virus protection should keep you safe. You may also want to get a good adware & spyware removal program, and that goes for both dial up and broadband users, since adware & spyware seem to be more of a nuisance these days than hackers. I would recommend adaware or Microsoft antispyware, which right now is a beta version but I think it does a good job. I use both. Since you are a beginner I would recommend Zone Alarm as the firewall because of it's ease of use and it's one of the best out there. If you are using Windows XP with service pack 2, the windows firewall that is included is also not a bad choice. A good firewall will keep you virtually invisible when online. My personal choice however is a broadband router. Routers are usually used for running a network and although I do run a wireless network at home, I would still use my router even if I wasn't and had just my one computer. Why? Because most, if not all routers, ! have a built in hardware firewall, which in my opinion, is better than the software firewalls mentioned above, and routers are not very expensive these days. You do not need a wireless router either for this purpose. If you think setting up a router will be too complicated then go with one of the two mentioned above. I have used zone alarm and liked it very much. It's simple to use. So is the windows firewall in XP service pack 2. Much easier than the older version from XP & XP service pack 1. So if you do have XP service pack 2, use its firewall. It won't cost you any money, and I think zonealarm still has a free version available but I would recommend buying the pro version. www.zonelabs.com

As for private information on web sites. Always make sure the site is secure. If it has the verisign logo it should be ok. I usually avoid using a credit card online. I use paypal for sites that accept it ( www.paypal.com ). This is a place that allows you to transfer money directly from your bank to your paypal account online. I use it for purchases on ebay and other places. However, I have used a cc many times and have many friends who do it and there has never been a problem. Now, most of the sites that use it for verification purposes only are usually sites that require proof of age, and we all know what kind of sites those are, usually X-rated sites, or pornography. There are also those legitimate times where you might want to test a legitimate site, such as an online dating site, or for example, a site that offers you sms services so that you can send text messages to cell phones. Some of these places will ask for cc information! even if you are on a free trial basis. They do this in hope that you will forget to cancel or you are late in canceling your free trial so that they can charge your card when the trial is over. If you do that kinda stuff online, always make sure before you sign up and give your information, that you know where to go to cancel if you do not wish to keep the service. I always make sure I know where the cancellation page is before I sign up. Many sites don't make it easy to find.
Well I hope this helped you. Happy surfing. You're gonna love the difference in speed, specially when down;oading those nudie pics, j/k

Submitted by: Hal T.

***************************************************************************

Answer:

Stephen

Having taken the same route as you just a few months ago, I think I now have a handle on the situation.

You say that you are already using Norton Anti-virus - I suggest that you add a personal firewall, possibly Norton, possibly McAfee, or even another of the top end products. This is utterly essential if you are going to be on line a lot of the time in future, as you will have to be to take advantage of the benefits of ASDL.

Right, that's the worst of the malware excluded, so now you need to shut out the annoying adware and spyware. To do this, and to slaughter spam at the same time, my advice is to download the beta test version of Microsoft's antispyware programme:(www.microsoft.com/athome/security/spyware/product).

This really is a good product, and its my favourite cost: free! It should be all you need in this ditection, because your ISP will be filtering tons of muck out long before it gets anywhere near you.

With that lot done,you should be AOK. Not totally impregnable, but neither is your home - you just need it impregnable enough to send the baddies looking for easier victims.

Good Luck!

Submitted by: James W.


***************************************************************************

Answer:

Well Steve, for the broadband connection you will need a reliable software firewall and antivirus app that are up to date.
Whilst most routers have a built in firewall, this is only effective against internet side threats - they can't stop that Trojan that got onto your PC from transmitting to it's controller or stop that printer program that has no reason to access the net at all from acting like a server.
As for Norton Personal Firewall - that is assuming you have Norton Internet Security - I have no experience with it though I've heard it can be difficult to setup properly.
As for antivirus, Norton is up to the task from NAV2000 onwards, though NAV2003 should be the minimum.

For the firewall if you don't have one or want to change, there are a number of free full working firewalls around such as Sygate, ZoneAlarm, Tiny Personal Firewall. All have great reviews and work really well - I 'shopped' around before my choice (ZA Security Suite).
ZoneAlarm lends itself as being the easiest to setup, and if your antivirus is NAV2000 or earlier purchasing the ZA Security Suite could be worth your while - the suite is ZoneAlarm Pro, IM protection, ZA Antivirus (good reviews, comparable to NAV), Email protection, Web Filter, "ID Lock" for storing CC info and the likes - it checks all outgoing data for this protected content to make sure it is sent only to trusted sites.
All of this can be controlled from one interface that can be password locked for security.

In addition too the above, downloading AdAware or SpyBot S&D to run manual sweeps every month or so can locate and remove annoying adware and spyware.

For your second point, the choice is yours. Some are legit and others are dodgy. I know there are several secure sites that service this particular concern and allow you to register with them, and should the other website that wants verification be associated with this secure site you can simply enter the ID info you will be given and you're verified without revealing your private info to a potentially unsecure site.

Good luck and watch your download quota.


Submitted by: Daniel G. of Hobart, Tasmania, Australia

***************************************************************************

Answer:

Answer to next weeks question:

This was also my response to Rob3000:

There's a simple answer for this...
Buy a hardware firewall.
You can either go with something from LinkSys which is only a router with NAT, and some firewall-like abilities, as well as ease of configuration and use, or purchase an actual hardware firewall. For that, I suggest the SonicWall series - lower priced than most, yet I've had the best results from customers with SonicWall. I've got several customers in the Tri-State Area (NY/NJ/PA), and different internet situations, as well as a few residential clients who use firewalls too - they're not only for businesses.
All the software in the world might help, but there's only one way to be sure your machine stays locked down, and that's to prevent anything from getting in in the first place, watching things that are already there, and making sure the things that do connect are connecting properly and for the right reasons - having a hardware firewall between your machine/LAN is the only way to do this completely.
Some of the Linksys models work in tandem with the AOL security features as well as ZoneAlarm and it's features, so if you're not willing to spend the extra money on a full firewall, go with a Linksys.

Oh yeah - if you're expecting 100% complete failsafe security, don't turn on your computer. *grin*

Submitted by: Robert P.

***************************************************************************

Answer:

Hackers, viruses, etc are truly invaders of Internet users, but there is help out there. Whether you have dial-up, ADSL, cable, or like me a wireless connection, you still remain a target for these predators. I'd first like to recommend to have plenty of disk space for your protection software. Second, I'd recommend Zone Alarm (firewall), AntiVir Guard (virus protection), Spybot, and Ad-aware. This may seem like a lot, but most of it is free off the Internet. Zone Alarm Pro costs extra. Use Google.com to find them. Websites that specialize in e-commerce like Amazon, Bookpool, Wachovia where you can buy off the Internet are relatively secure. I say relative because it always possible for someone to hack them; however, it is unlikely you be preyed upon using well established company websites. If you still feel uncomfortable then mail in your payments the old fashioned way. You could also find the book "Hackers Exposed" to be enlightening to your security concerns.
You can find that at Bookpool.com (they're secure - I use them too). Good Luck to you.

Submitted by: Mike F.

***************************************************************************

Answer:

One of the best ways to prevent vermin is to find a good ISP that does a thorough screening of your e-mail before it gets to you. Mine does, and it doesn't cost an additional cent for the service. Many companies are doing this to prevent a total crash of their own systems. I stay with dial up because I can unplug my phone line, and then no one can get in when I am not on line. Also change your passwords often, and make up silly names, and do write them down. Every site, I have a full page so that I can change the ones I use most weekly, and I just keep it on a 52 line page, that way I can do it once a week, no problem. I don't like any type of computer that I cannot disconnect from a phone line, and I've been working with computers since they first came out in the early 70's.
Hope it helps.

Submitted by: Nanette

***************************************************************************

Answer:

I'm an older surfer (50+), and I've found the best way to limit the negative aspects of surfing, is to utilise all the measures you have to hand. An Anti Virus programme helps, I've found Norton to be very good. So does a firewall, I use Zone Alarm, also an excellent product. A Spy Ware programme is also advisable, I use Ad-Aware. But above all the biggest asset I have is the off button. I never leave my computer running longer than I need it for. If it's not switched on it can't be found, and as long as you act sensibly, by backing up programmes before down loading etc you shouldn't get too many problems. Health and Safety at Work have ways of dealing with problems that arise. They first try to remove the problem from the area, if that is not possible they try to remove that which is likely to be affected from the problem, and if that is not possible as a last resort they try to ensure that a suitable form of Personal Protective Equipment is available. You can't remove the problem, you can however limit its affect, by turning off your computer when not in use, and you can utilise, several forms of protection now available, good Luck. You may also want to invest in Norton System Works though, as it does have some handy utilities to repair certain aspects that can go wrong on a computer.

Again purely a personal point of view, but I always steer clear of sites asking for credit card information purely for verification purposes. But although I do use some sites to complete some form of purchasing on line, using my credit card, I check them first with friends etc, and only use those of whom I have heard personally. To date I have had no problems. Be cautious, but remember not all are out to con you.


Submitted by: Chris E.

***************************************************************************

Answer:

To some extent this is going to depend were you are in the world (impossible to tell from these questions), what kind of computer you are using and who your ISP is.

I live in the UK and my ISP is British Telecom. They have a very good anti-spam filter for all email accounts. This works equally well when switching to ADSL.

The next issue is safety. Of course PCs running Windows we know to be at risk, but the later Apple Mac computers (G5s) have a built in fire wall.
Since we use Macs here and a number are connected via ADSL they go through a Router. This router also has a built in fire wall - so we have double protection.

It is important to have a fire wall when using ADSL since it is an always on situation. You don't want outsiders poking around when you are not looking.
So, either get some software that includes a fire wall or use a router to connect to the outside world that has a built in firewall. They may cost a little more, but will give you peace of mind.

Should you part up with credit card details and the like for verification purposes. I would say absolutely not. If people ask for this information treat them very warily. Of course if you are purchasing things on the internet you may need to give this information, but still be careful. My advice here is never to give this to anyone other than a well known and recognised supplier. You should also make sure that such information is sent via a encrypted line. You can tell if this is in place by the little closed padlock at the bottom of the screen. If this is open you will know that it is not secure.


Submitted by:
Peter A. of Argyll, Scotland


***************************************************************************

Answer:

Hi,
I have gone from 4 years of sitting on the computer at the library for 1 hour only and only needing to worry about getting from A-B.I now sit on the computer at home on the net since Christmas just gone.I have learnt after a 3 week struggle with constant problems...of Trojan Horses particularly but various other problems also on how to deal with them on my computer.
I have 56k, dial-up connection,windows 98 and netscape 6.

1. Clear all temp. files by opening up windows explorer (on my desktop).Also all cookies.
2. Download a registry cleaner and use once a week for moderate use.I have CleanMyP.C..
3. Download a firewall,mine is Zone Alarm.
4. I have AVG antivirus downloaded.
5. Downloaded is also Ad-Aware SE personal.
6. And Spybot goes well with Ad-Aware SE.

I regularly clean my files in Windows Explorer,sometimes after each session as I had trouble with embedded objects in the archives and could not be cleaned.So of course these objects became extremely bothersome.
I find now that my system is running quite smoothly now.
I use AVG once a week now ...unless I will find the computer running slower.
I then follow with Ad-Aware SE with Spybot lastly mostly on the same night and sometimes AVG on its own.
Hope this advice is useful....good luck
And by the way as far as wanting to know about the security of card numbers for sites that are not billing,I have one word to say....DON'T.

Submitted by: Mandy R.

***************************************************************************

Answer:

The first step I took when I got DSL was to check with my vendor to see if they had anything in place. To be safe I put a router with NAT translation in line after my modem. Now many of the modems include a router with NAT so that is something to check with the vendor. The router also allowed for more than one PC connected to my DSL connection. Each PC has an antivirus software application, a software firewall and a couple of spyware applications. I chose Zonelabs, zonealarm firewall Pro version for my software firewall, and Ad-Aware SE Personal edition from http://lavasoft.element5.com and Spybot-S&D from http://www.spybot.info to help with the spyware. One additional site to check out is www.grc.com and run their shields up.
There is a lot of good information there.

For personal information I am very careful. I have purchase items online but I check the vendor out, BBB, etc and I make sure the pages are secure. If a site wants more personal information I do not pass it on with out a very legit reason. Unsolicited emails are a real concern. I do not go to the site from the email, but will check out the issue through other channels. I usually find most to be bogus or scams. You might also want to be carefully when you sign up for free b’s on web sites. That is a good way for spammers to get your email address.

Hope this helps,

Submitted by: Jeff B.

Post 12 of 46

WELL DONE DANA

by jaayceee - 3/4/05 12:52 AM In reply to: 3/04/05 New broadband subscribers: do's and don'ts by Lee Koo (ADMIN) Moderator

Your message could not have come at a better time. I have just moved from a dialup to an ADSL connection 3 days ago!
I really enjoyed your tips, specially those pertaining to spyware and routers. It made great reading and I wish you and CNET more strength.
Jeh C.
India.

Post 13 of 46

Stolen Bank account information

by sisterofthewind - 3/4/05 4:16 AM In reply to: 3/04/05 New broadband subscribers: do's and don'ts by Lee Koo (ADMIN) Moderator

Yesterday I got a telemarketer call from someone that had said I qualified for a government grant of 5000 dollars.
They said they had my bank account information and wanted to verify it!
I never gave my information to anyone except Walmart shopping online as well as other reputable business's that I have always shopped with.
All of them supposedly have "secure servers".
When the man called me I asked him how he got my bank information and he said I put it on their site....he wanted me to read him the NUMBERS!
I asked him what he had...he replied with the exact numbers including the routing #!
I am worried that they can steal from my account.
I immediately called the bank manager...he told me that people can still steal your bank information.
That there are scams going on the net now with people stealing information and calling you up and getting a verbal in some way and then withdrawing from your account.
I hung up immediately on the man who had the information after I told him the account #'s were wrong!
What else can I do to protect myself from online thiefs?
Jennifer

Post 14 of 46

"Stolen"bank account numbers:Nothing to do with the Internet

by alixtcat - 3/4/05 5:57 AM In reply to: Stolen Bank account information by sisterofthewind

Every time you write a check you are giving your bank account numbers and your routing numbers. It has never been a problem for you before, right? Online "theives" can only get what you give them. Evidently you entered your bank account and routing number SOMEWHERE online. (Wal-Mart?) Why would you give your bank account information to Wal-mart.com? Were you buying something using your bank account information? Use only a credit card with fraud protection to purchase online. If you don't have a credit card, they are easy to get.

How to protect yourself? Don't give out any info online that could be used against you and that does not offer fraud protection. What did the bank manager suggest? He should have offered to change your account information at the very least. If not, change banks.

It sounds like you might have some spyware that contains a keylogger. This is probably how the telemarketer got your account information. Just do a search on Google for SPYWARE REMOVAL and install and run a few of the programs. (Ad-Aware, Spybot)
You can protect yourself by getting the spyware software installed and use it.

Also, get a credit card that offers fraud protection instead of giving out your banking information at Wal-Mart.

Post 15 of 46

RE: Stolen Bank Account Information

by mfiore - 3/5/05 4:05 PM In reply to: Stolen Bank account information by sisterofthewind

You might not need to look for an online company that has provided your bank account information. It is not uncommon for any retail eastablishment to use electronic check verification systems. These systems use either telephone, cable or satellite transmissions to verify that your account does exist and sufficient funds are available. This may sound safe enough, but not all suppliers of these services encrypt your account information. Anyone hacking into one of these networks may have access to your banking information. Be extra cautious in you are at an event were the vendor is using a cell phone for check verification since these networks are seldom secure.

Does anyone still accept cash?????

Forum legend:
Locked Locked thread
Moderator Moderator
CNET staff CNET staff
Samsung staff Samsung staff
Norton Authorized Support team Norton Authorized Support team
AVG staff AVG staff
Windows Outreach team Windows Outreach team
Dell staff Dell staff
Intel staff Intel staff
Powered by Jive Software