teq
Don't get hacked!
3-part series
15 Security tips for avoiding online nightmares
~part 2~
We live in a digital age and hacking has become more common place every day. If somebody hacks your account you can often go through months of Agony, loss of identity or financial loss. Sometimes the result of the nightmare is you can never get back into your original account. Rather than being a victim follow these simple tips to avoid an online nightmare.
(see part 1 for tips 1-5)
TIP #6. Use two step authentication whenever possible.
Sites like Facebook, Google, Amazon, eBay, Steam and others have adopted two step Authentication. Two-step authentication is when a website uses an application on your smartphone (like google authenticator) or a text message to your cell phone as an additional 2nd password required at login. These 2 step passwords change within seconds.
Whenever possible turn on 2 step authentication as it makes hacking your account nearly impossible unless someone has your phone.
TIP #7. When Logging in glance at the address bar.
Hackers will try to obtain your password by sending you links in an email or links from a website that will prompt you to log in. Often hackers will use enticements to get you to click on these links and try to steal your username and password by directing you to a page that looks like an official login page. They may try scare you saying you have a big bank charge or your account will be deleted. They may say you have won a big prize trying to play off your curiosity or greed.
Take a quick glance at the address bar and look for these 2 things:
● Is the website secure? (See Photo) https:// - If a website does not have a secure logon I recommend you let the site owner know about free secure certificates at letsencrypt.org
When a website is secure it protects you from online eavesdropping by creating a encrypted connection between you and the website.
● Is the address correct?
Example: 2038u230982390823. ebay.com., hackerssite.com/?login92-0-020-2781220920290
○ This may appear legitimate because in this example it says ebay.com but that’s not the real domain!!! Hackers spend a lot of time to craft pages that look like the official login.
○ Be suspicious when following links. When in doubt login with the official website (in this example ebay.com).
TIP #8. Don’t download attachments from unknown sources
Another way hackers can steal your credentials or gain access to your computer is by sending you a file via email or getting you to download a malicious file or program. Did you get a bill from a hotel you didn't stay in? Your curiosity might prompt you to download and open the file but if you haven’t stayed at that hotel recently don't do it. It might be a malicious file. Also if you're hunting for a free movie or game on the internet most of the time those downloads will be infected with programs designed to compromise your security. Don't do it! Something for nothing can often cost you a lot. Only download from reputable sources Use an antivirus or Internet Security program to check even legitimate seeming files. A fantastic website to check files if in doubt is the multi antivirus and security engine service virustotal.com owned by Google. They have over 70 major anti-virus scans all in one place.
TIP #9. Shoulder surfing, Friends or public computers.
Shoulder surfing: When you type in your password do a quick glance. Someone might be looking over your shoulder as you type your password. This is such a serious problem google is working on an artificial intelligence to use your selfie camera to see if anyone is looking over your shoulder. A quick glance and move if necessary will protect you from password peeping.
Public Computers: If you are using someone else’s computer such as a public, library, cafe or even a friend’s computer realize people may have loaded malicious software to capture your keystrokes. Use 2 step (See TIP #6) whenever possible as this will prevent someone from logging into your accounts EVEN if they have your password.
Use Incognito: Use incognito mode available in many browsers when logging on public computers. This will erase any stored information after you close the browser. Read more about incognito mode here: {needs link}
Log out: Always make sure you log-out when you are finished as this will prevent someone from following logging into your account when you walk away.
TIP #10. Free Wifi? Use VPN when in public places
Enjoying that free Wi-Fi at Starbucks? Someone may be impersonating that legitimate free Wi-Fi or offering you free Wi-Fi so they can spy on you. Use VPN (Virtual Private Network) to prevent those people from snooping on your activities or redirecting you to malicious or fake sites. VPN creates a secure link to another computer and encrypts information from prying eyes on public wifi. Even if you are using secure sites a hacker can see what sites you are going to or even worse redirect you to phoney websites. With VPN they won’t see anything but an encrypted connection to a VPN service provider.
Here’s a brief explanation of how VPN works: {needs link}
stay qonnected for tips
10-15
Next up in Q
Don't get hacked! part 3
David Chehebar
Technolgy CONTRIBUTOR