|
|
Information security is not a product or service or someone else’s responsibility – it is our responsibility. Yes, it covers a lot of different aspects and some of them are pretty arcane, but common sense goes a long way to keeping us all safer.
When you download and install software on your computer, you normally assume that what you click-on is what you get. But all too often, it isn’t what it seems to be. Here are some tips and sites you can use to find answers and a little help before things go bad.
Passwords
Passwords are like underwear - never share your password. Your password is both your implied permission for someone to do whatever to your system (like changing your password and locking you out) and impersonating you on-line. If you don’t want your ex-“friend” telling secrets about you to your “new” friend, then it is wise to change your password on your system (the same goes for IM passwords).
For help changing your password, see:
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/usercpl_change_password.mspx
When you pick a password, remember that a word that can be found in the dictionary, like “exchange,” for instance, takes less than a second to break with a password cracker. Adding one number to the password like “exchange5” adds almost 24 hours to the cracker’s task. The best passwords have letters, numbers and symbols like “3xCh@Ng3” … A password like that gives crackers heartburn.
Please log out of any computer you are logged into when finished, even if your just leaving for a couple of minutes. It is simply a matter of typing “Control/Alt/Delete” and then “Return” … the system is now locked and no one can read your email, delete your term paper, or irritate your IM buddies while you’re gone. When you return, hit any key and type your username and password to resume where you left off. And while we're on this topic... Never leave your laptop in a public area unattended!
Anti-virus software is available for your system free from the University, so there is no reason to buy your own or to go without. If you don’t have a current version of Norton Anti-Virus installed you can get one by downloading it from the Computer Help Desk's page on Symantec Antivirus.
After you have downloaded this program and installed it, set-up a virus scan schedule to run once a day during a time you will not be using your system but it will be up and running.
Microsoft has enabled the personal firewall on all XP machines that have downloaded and installed “Service Pack 2” or “SP2” … this will go a long way to close a lot of exploitable features of Microsoft XP and make your system more reliable.
Internet Security
Don’t buy anything on-line using a computer system that is not yours. This should be equated to using dirty silverware! You wouldn’t put a dirty fork in your mouth so why would you put your credit ID, account numbers, passwords, social security number, phone number, address etc. into a public system such as a library system or one at Kinko’s? These systems can have hidden “key loggers” or remote control Trojans installed that will “harvest” your credit card number, shipping address, expiration date.
(Your social security number is especially important; never give it to anyone except for tax-related purposes.)
If you are interested in some to the dangers the Internet has to offer, or you'd like to know a little more about the local sub-net you are connected to, you can check out: http://www.grc.com/su-danger.htm
E-mail
If you are not expecting it – it’s SPAM. Don’t give your Quinnipiac e-mail address out unless it’s to someone with whom you need to communicate. If you need to give an e-mail address to get a password or something use a “throw away” Hotmail or Yahoo account. If you get an e-mail and the sender asks for personal information -- it’s guaranteed to be a criminal scheme. If the offer seems to be too good to be true … guess what… it is! There are no strange Africans showing-up in your e-mail going to make you rich… no one is “writing things” about you on some website somewhere that can only be shared with you if send them money…and no, you can’t make money at home “working” on the Internet (usually accepting stolen goods and sending them overseas to your “employer”).
We have a new Anti-Spam device installed at the University and you can set up your account up by going to: http://emailfilter.quinnipiac.edu |