Be Your Own Security Expert: Difference between revisions
Line 52: | Line 52: | ||
* Public networks | * Public networks | ||
* Physical security | * Physical security | ||
===Reduce your attack surface=== | |||
Each piece of software on your system could contain security vulnerabilities so it makes sense to uninstall things you don't need. This is critically important when it comes to browser plug-ins as these can often be directly invoked by websites you might visit. | |||
In particular, uninstall the Java plugin if you have it. This is required by a tiny number of websites and has a poor security record. | |||
Likewise, Flash has been plagued by problems, often exploited by malicious Flash-based adverts. Google for instructions for setting it to click-to play in your favourite browser. | |||
===Unsolicited emails=== | ===Unsolicited emails=== | ||
If you receive an unsolicited email, clicking a link in it or opening an attachment can really spoil your day. This is probably the commonest way to get infected with something bad. | |||
Such emails are normally part of a "phishing" campaigns in which malicious emails are sent to large numbers of email addresses. Sometimes they are very crude, simply containing a link you may be tempted to click, just out of curiosity. Other times they may be quite cunning, e.g. making out there is a package addressed to you awaiting delivery. The email may even appear to come from someone you know, if their contacts list has been compromised, since forging the sender's address in an email is trivially easy. | |||
To avoid getting caught, you should treat all emails you weren't expecting with the greatest of suspicion unless you are quite certain the sender is genuine. | |||
Also, make sure your system is fully patched and updated to eliminate, as far as possible, the vulnerabilities a malicious email might try to exploit. | |||
==External links== | ==External links== |
Revision as of 21:43, 13 December 2015
Security tips we should all be following. (This page is work in progress.)
Summary
Modern computers and mobile devices store vast amounts of information, some of it sensitive, and yet more of our data is in "the cloud", held by corporations such as Facebook and Google. Just as we've learned that keeping a front door key under the door mat might not be a good idea, there are important and not always obvious lessons we need to learn about keeping our digital lives safe. This page covers the basics.
Security Top Tips
Google carried out research comparing the top security tips given by security experts with the top security measures general users believed were important, and found worrying differences, as shown below.
Non-Security Expert | Security Expert | |
---|---|---|
1 | Use antivirus software
|
Install software updates
|
2 | Use strong passwords
|
Use unique passwords
|
3 | Change passwords often
|
Use 2-factor authentication
|
4 | Only visit websites you know
|
Use strong passwords
|
5 | Don't share personal information
|
Use a password manager
People often worry that to use a password manager is to put all their eggs in one basket. Well, it is, and don't use an obscure one, but with a really good master password the benefit is overwhelming. Never again struggle to remember a website's password or be tempted to choose a weak one or one shared among different sites, and let the password manager choose totally random and completely unguessable passwords for you. |
Additional tips
- Reduce your attack surface
- Unsolicited attachments/phishing
- Backups - 3 copies, 2 media types, 1 offsite
- Data destruction
- Public networks
- Physical security
Reduce your attack surface
Each piece of software on your system could contain security vulnerabilities so it makes sense to uninstall things you don't need. This is critically important when it comes to browser plug-ins as these can often be directly invoked by websites you might visit.
In particular, uninstall the Java plugin if you have it. This is required by a tiny number of websites and has a poor security record.
Likewise, Flash has been plagued by problems, often exploited by malicious Flash-based adverts. Google for instructions for setting it to click-to play in your favourite browser.
Unsolicited emails
If you receive an unsolicited email, clicking a link in it or opening an attachment can really spoil your day. This is probably the commonest way to get infected with something bad.
Such emails are normally part of a "phishing" campaigns in which malicious emails are sent to large numbers of email addresses. Sometimes they are very crude, simply containing a link you may be tempted to click, just out of curiosity. Other times they may be quite cunning, e.g. making out there is a package addressed to you awaiting delivery. The email may even appear to come from someone you know, if their contacts list has been compromised, since forging the sender's address in an email is trivially easy.
To avoid getting caught, you should treat all emails you weren't expecting with the greatest of suspicion unless you are quite certain the sender is genuine.
Also, make sure your system is fully patched and updated to eliminate, as far as possible, the vulnerabilities a malicious email might try to exploit.
External links
- External links (if any) as bullet points.
- If non, delete this section.