Archive for April, 2007

Posted on Apr 22nd, 2007

There once was a time when the only option people had when shopping was to either call in or snail mail in a catalog order form or to jump in the family car, fight through traffic, and wait in long checkout lines to complete the purchase.

Well, nowadays there’s still a few major mail order catalogs floating around and we all still visit our local retail outlets, but time has also introduced the internet as one of our options to shop from the comforts of home.

The internet has made shopping at home a breeze and along with it has unfortunately brought the so called ”Evil Doers” who I believe have such little happiness in their own lives that they must leech pleasure from the hardworking and innocent individuals of our wonderful and surrounding nations.

And yes, I am speaking of the ever growing problem known as Identity and Credit Card Theft.

As an online and offline consumer it is in my best interest to protect myself while at the same time wanting to help others protect themselves as well.

Below is a short yet thorough list of ways that you can follow to help yourself stay safe and be a happy consumer and keep “Evil Doers” at bay.

1) Always shred sensitive materials such as bank statements before throwing them away in the regular trash. Just because the paper documents are in the garbage doesn’t mean they are safe from peeping eyes.

2) Contact your local bank or credit card provider to request a card with a low limit. This can make you feel more at ease about shopping at those not so familiar places and can reduce the damages caused by such an ill intended individual if they get hold of your number.

Also never give out the 3-letter Card Identification Number found on the back of the credit card unless you absolutely trust the merchant you are dealing with.

3) NEVER give out your social security card number for any reason! If capable you are best to obtain a tax I.D. number from the Internal Revenue Service or local tax agency.

If any “Evil Doer” gets hold of your personal information such as home address, birth date, and Social Security Number you are at great risk of being victimized.

4) Only purchase items online through secure order pages which is typically indicated by a small, yellow, “Padlock” image usually located somewhere near the bottom of your internet browsers window.

5) If you ever receive an email asking for sensitive information and claiming to be from a company that you have an account with, NEVER supply the requested information and never click any links or hit reply to send such personal information back to the “company”.

Many legit companies will not ask for sensitive information via email.

If you get such an email you are better off to make a copy of the letter you received then close that browser window and then open a NEW window and access the company directly from their website address.

You should then submit the email you made a copy of to the company so that their anti- fraud personnel can take the necessary steps to send out warnings of possible fraudulent activity to be aware of to its members.

6) Be cautious about downloading and installing unnecessary programs onto your computer. If there are programs that you indeed must download ALWAYS scan the files for viruses and make sure that your anti-virus program is up to date.

There’s a wide variety of viruses that are distributed to unprotected computer systems and some of which are known as “Key Stroke Loggers” that record your sensitive log in names and passwords and then are made known to the trouble maker.

7) If possible try to utilize 2 different computers when using the internet.

One computer should only be used for general internet surfing just in case it was to obtain a virus such as a Key Stroke Logger so there would be little threat of someone getting your personal information.

Only use the second computer to access more sensitive information such as online banking or other important websites that require passwords and important information.

8) Finally, if there are young members of the family that have computer use privileges be sure to monitor and restrict the sites and programs they are allowed to use.

Many fraudulent individuals love to prey on the unexpecting and inexperienced web surfer.

In any case just be certain to contact the police or appropriate authorities the INSTANT you believe that you have become a victim of Identity Theft or Credit Card Number Theft.

The sooner you tell the authorities the better the chance they can help you recover from a financial catastrophe.

Dan devotes much time working on his internet ventures. He currently has a T-Shirt store at http://www.cafepress.com/tshirtsngifts and an ebook store at http://online-book-store.net that caters to his visitors.

Posted on Apr 21st, 2007

Whether you have learned your lesson from a past experience with a nasty computer virus or have been pressing your luck by surfing the web and downloading various files or opening those email messages sent to you by people you don’t know without any real understanding of just how vulnerable you really are each time you log onto your computer you now have the opportunity to discover what steps you can take to avoid such an annoying and many times destructive infestation.

Listed below are some of the guidelines you can follow in order to keep those nasty viruses from making a mess out of your computer and your life.

•Purchase and install a well respected antivirus software program and be sure to set it up so that it automatically runs when the computer starts up each time.

•Make sure to keep your antivirus software up to date by either using the automatic update feature that many come with or make it a habit to manually check at least once or twice a week for updates on your own.

•Set your antivirus program to scan for potential viruses each time you open a word-processing document like the ones that get sent through email. Viruses found in word-processing documents are called Macro Viruses.

•When purchasing software make sure to only buy from vendors that are well known and from ones you trust.

•Resist swapping data with the use of floppy disks or other mobile storage devices between various computers. If exchanging programs between computers is unavoidable just make sure to scan the storage device(s) for viruses before transferring data from one computer to the next.

•If using floppy disks to transfer data make sure to format them before using them for the first time.

•Never use pirated software. This is both illegal and a very good way to invite an unwanted computer virus.

•When downloading software from the internet do so as little as possible. There are many neat programs available on the internet, but unfortunately there are many viruses that go along with them also.

•If you must download programs from the internet ALWAYS scan them for viruses BEFORE opening them up to install on your computer.

•Probably the most important and neglected method of disaster recovery are periodic backups of all important files found on your computer. Should a virus happen to get through your lines of defense you may need to replace the virus corrupted files with fresh ones that have been kept for such an occasion.

Finally, it is not guaranteed that if you follow the above steps that you will not be the victim of a computer virus, but you can sure bet that if followed you will greatly reduce the chance of being an unsuspecting recipient of such an unwanted program.

Dan devotes much time working on his internet ventures. He currently has a T-Shirt store at http://www.cafepress.com/giftsandtshirts and an ebook store at http://infoheaven-digital-books.com that caters to his visitors.

Posted on Apr 20th, 2007

The movie Little Black Book features a young woman, Stacy, who is frustrated when her boyfriend refuses to share information about his past relationships. When his PDA, a Palm Tungsten C, falls into her hands, she is faced with a conundrum. Does she give it back, or does she explore it? If she gave it back, we wouldn’t have a movie, now would we? Stacy then proceeds to identify his ex-girlfriends and contact them. Let the games begin.

Could this really happen? Of course it could. Most PDA’s contain a plethora of information about a person and their activities, their digital footprints. People store contact information, appointments, meetings and midnight rendezvous’. They store passwords, login ID’s and PIN numbers. They have photos of people they know and sometimes in awkward circumstances. It’s a lot to have to explain. The courts are only beginning to grapple with how to handle the content in a PDA. One person’s little black book can be very incriminating indeed.

For the rest of us, we have nothing as exotic; however, we are all in danger of exposure and threat. Identify theft has become one of the largest white-collar crimes. There is enough information in the average PDA for someone to take over your life. So, what’s the solution? Give up your PDA? No. You face the same problem with the typical day planner. It has all of the same information, it’s just not as accessible. In fact, a PDA has certain advantages over a planner. You can password protect some of the data. You can even encrypt data. Most importantly, you have a backup. The data is safely stored on your computer and archived on external media if you have taken the proper steps.

That duplication of data also means an identity thief has more ways to get to it. So, what can you do? Well, the first concern is to make sure that you backup your data. Synchronize your PDA at least daily. I synchronize my Treo 600 2-3 times each day, usually when I arrive at my office or leave it. Backing up your data means that you should be creating a copy on tape, CD, zip disk, flash ROM or other external media and storing it offsite. If you are not, you are asking for trouble and your business is at risk. If your PDA is ever stolen, you will need to restore that data on a new PDA.

Next, you need to minimize the amount of data someone can actually access. Let’s face it, if a hacker really wants to get your data, they will succeed. However, not every criminal is a super hacker. Sometimes you just want to keep your information from prying eyes. Just because you labeled something as private in your PDA doesn’t mean someone else can’t read it. It depends on what application you synchronize with. If you sync with Outlook, records that are private on your PDA may be public in Outlook.

The best way to protect passwords and PIN numbers is to store them in a password application that encrypts the data. The best applications have both a PDA application and a desktop application that allows access to the information from either system. The trouble is converting that data from whatever format it’s in currently. I’ve struggled with this one myself. There is no easy method I’ve found so far. Just set aside time to copy and paste the data into the password application. It might take a few hours to get that information into a secure application.

If you’re worried about someone viewing your schedule, the best approach is to archive your past history periodically. Outlook has settings that allow you to specify to how often calendar events will be archived. This will wipe the history from your PDA also. Archives are usually stored in an external file that can be accessed later.

If you have incriminating photos, delete them. If you want a copy, save it on external media like tape, CD and flash ROM. For contacts, you can archive them or simply move the record to an external file. Outlook allows you to create a .pst file that you can use to save email, calendar, address, tasks, or other information. Once you move a record, it will be removed from your PDA.

And, don’t forget to delete the cookies and memory cache on your PDA’s web browser. Remember that website you checked out last week? Is that something you want everyone else to know about? I don’t think so.

Don’t forget physical security; keep an eye on your PDA. It’s possible to take steps to protect your data and remove your digital footprints. Protect your little black book and it will protect you.

Rick Cooper, The PDA Pro, is the PDA Coach for productivity anytime, anywhere. He is a national speaker on business productivity and sales. Rick is President of StratAchieve, a company specializing in coaching services to improve productivity and increase revenues. For more information, visit his website at www.thepdapro.com or call (800) 677-6708.

Posted on Apr 19th, 2007

We all know that it’s dangerous to use the same password for more than one program. If you sign up for a program run by someone of low moral fibre, what is to stop them running through various programs with your username and password to see what they can access?

But of course remembering all the different passwords can be a headache. And writing them down somewhere isn’t a great deal safer than using the same password again and again.

You can buy software that stores the passwords for you, but do you really want to pay money for another piece of software that performs a solitary function?

Try this simple, two-step, technique that lets you generate an infinite number of passwords, without having to remember any of them.

Step One: Choose a 4-6 letter word or number sequence that you can remember easily. Needless to say, don’t reveal this to anyone. For the purpose of this demonstration, I’ll choose the word "cash"

Step Two: Apply this secret word or number sequence to the name of the program you are setting up the password for.

To accomplish this, invent a couple of easy to remember rules.

Rule 1: Decide which part of the program name you are going to use. It could be the whole name, the first 6 letters of the name, the last 8 letters of the name. It’s totally up to you, be as creative as you like.

eg – For the program TrafficSwarm, I might choose the first 8 letters of the name. This give me: "traffics"

Rule 2: Take the portion of the program name you have selected and merge it with your secret word or number sequence to create a unique password. Again, be as creative as you can with this rule. You could replace every second letter, every third letter, every vowel or every consonant.

eg – If I replace every second letter of "traffics" with my secret word "cash", I get " t c a a f s c h "

or

- If I replace every vowel of "traffics" with my secret word "cash", I get " t r c f f a c s ". The "s" and the "h" are not used as "traffics" has only two vowels, but some words will use all four letters of "cash". Some words might have more than four vowels, in which case just start back at the beginning with "c" and "a" and so on…

You don’t have to worry about making your rules overly complex. Even the best code-breakers would need to see several of your passwords before they could start to guess what you rules are.

As long as you keep your rules safe and sound, your password is secure. But the real beauty of this system, is that you don’t have to remember the passwords you create. You ONLY have to remember the rules.

When you log into the program the next time, just apply your rules to the program name, and you can work out what password you generated. Once you have been using the rules for a while, you’ll generate the password in your head, without even having to pause.

Don’t worry if it seems a little complicated at first. Read this article through a couple more times and then try this technique with just a couple of programs. Once you are happy with it, all that’s left to do is to start working your way through existing programs and update your passwords. It’s time consuming, but for peace of mind you’ll be glad you did.

David Congreave is owner of The Nettle Ezine, the newsletter for the home business — online.  David lives in Leeds, in the United Kingdom, with his wife Leanne.

Posted on Apr 18th, 2007

It has been said that with the wealth of information, freely available, the Internet has the ability to make you smarter, faster, than any other medium on the planet.

Of course with an equal amount of mis-information, it also has the ability to make you dumber, faster, than any other medium on the planet.

So how do you decide which sources of information to trust and which sources to avoid?

It has long been a source of debate, whether or not, any information can be 100% reliable. There is, it is said, no such thing as absolute truth (is that an absolute truth?).

Really though, there is no point in driving yourself mad with such trivial philosophies. All you have to do is decide, in your own mind, where your level of skepticism begins and ends. And skepticism is important in this day and age. That isn’t a negative viewpoint, it’s just a realistic assessment of what you need to survive.

Imagine for a moment that you’re looking for a solution that will send your weekly newsletter to your eagerly awaiting mailing list. You can choose from a myriad of different software, hardware, third-party solutions. Some free, some cheap, some expensive and some unreliable. A decision has to be made. Who’s going to help you? Look at the options.

SPAM: Lots of unsolicited emails promise to have the definitive solution and at one time this might have been worth a look. Today, however, if a company is so discourteous that they ignore the generally accepted rules of spamming do you really want to do business with them?

Verdict: Dubious 

WEBSITE: Ranked high on Google, plenty of glowing testimonials, even a 30 day money-back guarantee. But wait! Are those testimonials real or fictitious? Is there a clause that will prevent you from returning the product if you dislike it? Can you really believe anything you are being told?

The reality is, that many companies will say anything to make a sale. This is true both on the Internet and the High Street. Desire for profit can quickly deteriorate good intentions. I don’t need to preach about this. You know it’s true.

Accept this, then temper your paranoia by checking the facts. Legitimate companies exist on the Internet by the thousand. The ones worth buying from will happily talk to you on the phone and answer your questions in person. They will respond to your questions by email, probably on the same day. And, if they’re really worth spending money on, they will let you personally contact previous customers so you can confirm that what they’re saying is true.

Make the company work for the sale. If they can’t be bothered to reply to your emails or turn the answering machine off, don’t bother to give them your credit card number.

Verdict: Tread carefully

RECOMMENDATIONS: The product/service is recommended by a third party, perhaps in an ezine, or on a website. Sounds great? A genuine testimonial? But wait!

What is the recommender’s motive?

Love for fellow man?

Appreciation of the product?

Cash?

If you picked option number 3, you’re probably right. Joint ventures and affiliate programmes have led to many a recommendation of a product/service that hasn’t been evaluated or even used. There are exceptions but there’s a good chance that the recommendation is linked to a commission.

This doesn’t, by itself, mean the testimonial is bogus. It simply means, as previously stated, that you should use some skepticism.

Look for recommendations from newsletters or websites that have been around for some time. If they have a reputation to consider, they will (should?) think twice before promoting something they haven’t fully investigated.

Verdict: Useful, be sure about the source

SEARCH ENGINES: Once you’ve found the product/service that sets you alight, look for negative feedback. Search for the product name alongside words like "hate" or "problem".

If lots of people have used this product and had problems, then at least few will likely have posted their experiences on a forum.

If no results appear, take this as a good sign and move on.

Verdict: Essential step 

FORUMS: If you’re really having difficulty finding what you are looking for, forums could be the key.

Look around for about half a dozen forums that you like and have plenty of traffic. Then post a description of what you need on all of them. Check back frequently and see what comes up.

Forums are an excellent way to find uncensored information offered solely for its value. Generally speaking, what you see is what you get.

There are, of course, exceptions. Occasionally someone might recommend something, solely because they are affiliated in some way. But if the forum is busy enough, they probably won’t get away with it.

Verdict: About as safe as you can hope to find 

Does the above sound obvious to you? Maybe it is, but every day hundreds or even thousands lose money on poor or useful products/services that they were convinced were perfect. If you doubt it, check through a few related forums.

If you run your own ezine/website/forum, ask yourself what you can do to help those who aren’t as experienced. Your honesty will set you apart from the rest.

If all of this seems helpful, all well and good. Your final task is to apply the above information to this article and ask yourself, with just a touch of skepticism:

"Is it information or misinformation?"

Dylan Campbell has been quietly making a living on the Internet since 2000. He has a unique, and often controversial, view of the industry.

Dylan Campbell writes exclusively for The Nettle Ezine.

Posted on Apr 17th, 2007

Spies, spyware, internet parasites are among what they are usually called. These are scouts that monitor your web activities. The work undercover to check on your surfing patterns, spending habits, items bought, they extract email addresses, hijack browsers, steal credit card information. These are just some of the things a spyware is capable of.

A spyware is mainly an information hungry parasite determined to gather data from a user or surfer without him knowing it.

The information gathered by these parasites are then sent to the originator without the users consent. Most often, the information gathered by the spyware are used to generate ads and pop-ups on the user’s PC.

Spywares and Adwares aside from being a nuisance and an invasion of privacy can also jeopardize the optimal performance of your PC. They can eat up unused disk spaces and position themselves in an inconspicuous location in your hard drive. They can also eat the bandwidth, crash your system and oftentimes inflict themselves in the Registry or in the memory of your computer.

Spyware and Adwares have become very rampant nowadays. Prevent yourself from being a victim of these by:

* Being careful of Freeware and Shareware Downloads

- Some of these downloads are tagged with spywares which may be unknown to the user. Refrain from downloading sharewares and freewares from unknown sources.

* Installing a good spyware/adware scanner and removal software

- There are a number of spyware scanner and/or removal softwares in the market today. A good spyware scanner can effectively locate all spywares installed on your PC and a good spyware removal tool can effectively remove all the spywares detected.

Spy Scanners are programs designed to detect spies in your PC. A good spy scanner can effectively search through the most unnoticeable embedded files that spy on you.

Most Spy scanners include a spyware removal function. Other spy scanners do not entail spyware removal features but display the logs of the spyware detected in your PC. The information in the logs contains the location and nature of the spywares.

For spy scanners with no built-in spyware removal functions, a manual deletion of the spyware files could also be done since the location and the file type is specified in the logs. Some Spy scanner products on the market today have spyware scan available for non-paying users and the removal tool available only for paying users.

Spy Scanners when installed can be chosen to run on demand or periodically.

——————————————————————-
Gina Marie Capatar is a Technical Writer by profession and writes articles for www.isnare.com, also accepts freelance writing jobs. feel free to drop by www.isnare.com or email her at gcapatar@gmail.com
——————————————————————-

Posted on Apr 16th, 2007

Have been an Internet user for more than 9 years, I have 100’s of logins and passwords to keep. I’m paranoid. I’m now even more paranoid after I joined YMMSS because I use online payment systems on weekly basis if not daily.

I used to use Microsoft Excel to manage my usernames, passwords, and other registration information, both online and offline. Excel is not safe because there are programs to crack password protected Excel workbooks and I even cracked the spreadsheet and VBA source code password for one of my old Excel financial models I developed. Today I still use Excel to store some personal information but I only save the Excel file on my another PC that is not connected to Internet.

In my article "6 Essential Steps to Protect Your Computer On the Internet", I highly recommended the award winning RoboForm. Free version of RoboForm (http://www.roboform.com) does come with limitations such as 10 Passcards only. If you don’t want to buy the Pro version (costs $29.99 as of my writing), there is an easy-to-use freeware (see below) you can download right now and manage unlimited usernames and passwords.

Download freeware Password Safe from SourceForge.net - the Open Source community.

https://sourceforge.net/projects/passwordsafe/

Here are some great features of Password Safe:

- No installation is required. Simply download and double click the pwsafe.exe file.

- Easy portable. Just copy and paste the EXE file and .dat database file to any disks. Be aware that when you open Password Safe in the other disk, you need to specify the database file location (the .dat file).

- One master password unlocks an entire password database that can contain all your other passwords.

- Grouping. Usernames and passwords can be grouped into different categories you define, eg. Email Address, Payment, etc. You are in total control.

- Strong, random password generation.

- Copy username and password to clipboard so that you don’t have to type them. Always keep in mind that you should never type any username and password.

- Browse to URL. With one click, the URL related to your username and password can be opened in your default web browser. Another save on typing.

- You can create more than one password database (but you have to memorize more than one master password. Not recommended.)

Here are some tips of using Password Safe (version 2.04) and managing password in general.

Tip #1 - Always create a strong master password (Safe Combination as used in the software).

Strong password should meet the following criteria:

- At least 8 characters long to prevent cracking. The longer the better.

- The password should contain lowercase, uppercase, numeric, and any other characters that are available on keyboard.

- Ideally you should not use any meaningful words or numbers in the password. Totally random password is the best.

Tip #2 - Let PasswordSafe generate random password for you.

To generate random password:

- Click the menu item Edit.

- Select Add Entry (or use corresponding icon button).

- When the dialogue window opens, on the right hand side, you can see a Random Password Generate button. Click it, a random password will be automatically inserted in the Password field.

The generated random password is constructed according to the password policy defined in Password Safe. You can modify the default policy.

- Click the menu item Manage. - In the dropdown menu, click Options. - Click the Password Policy tab. - Change the policy based on the strong password criteria stated above.

Some sites only allow alphanumeric passwords so make sure you select the appropriate check boxes when this is the case.

Tip #3 - Very Important: Never type your master password when open PasswordSafe.

Keylogger spyware can record keystrokes.

How can you enter master password without typing? I do this.

Step 1: Open a Notepad file (.txt).

Step 2: Copy and paste an article from any Internet website to this .txt file.

Step 3: Select characters from this article and copy, paste to form your master password.

Tip #4 - Very Important: Never lose your master password.

I memorize my master password. In addition, I also physically write it down to a hand written study material that has my previous uni works. Among the 1,000’s of words, I placed my 22 characters master password in two different pages in encrypted format that can let me derive my master password.

Tip #5 - Categorize username and password.

When you add a new entry, you need to specify Group, Title, Username, Password, and Notes. The entries that share the same Group name will be gathered together automatically.

One Group can contain another Group as its sub Group. For example, I have Email Address group which contains three sub-groups as Friend, Work, Family.

Tip #6 - For security reasons, always use Copy Username to Clipboard and Copy Password to Clipboard.

Remember, never type username and password on a web form. This is how to do it.

- Highlight an entry.

- Right click mouse.

- In the pop-up menu, select Copy Username to Clipboard or Copy Password to Clipboard

- Go to your login form, paste the username or password.

You can use mouse to do copy and paste. If you prefer short-cut keys, this is how.

Copy: Ctrl+C Paste: Ctrl+V

Tip #7 - Use "Browse to URL" rather than typing URL in browser address bar.

When you enter a new entry or edit an existing one, you can enter a URL (must start with http://) at the first line in the Notes field. You can save website login page’s URL in this field. When you need to open a login page in browser, right click the entry and click Browse to URL in the pop-up menu. Then the login page will be opened in your default web browser automatically.

Tip #8 - Don’t forget to backup your password database file.

Use the Make Backup menu item to save a second copy of your password file.

Tip #9 - Store your backups in a different offline computer or location.

This is a widely used backup strategy.

Tip #10 - Use the Notes field to store as many information as you want. Very handy for memo.

If you don’t have two computers, you need to use other storage media to save a second copy of your backup file and version them by date (easy to track back). Other storage media can be zip drive, thumb drive, floppy disk, CD, etc.

Off site backups are also important. Don’t overlook this. You lose all your data if you lose both your computer and your other storage media all together for any reason.

Many companies provide online storage services for a fee. You can store any digital files (you should password protect these files first) on their secure servers. Search Google and you will find a lot.

I have two computers. One is used to surf net and it does not have any sensitive info stored on it. Another one is for my development work (not connected to Internet) and it has my backup files. I also store my backups in a thumb drive and CDs sometimes.

The author, Jerry Yu, is an experienced internet marketer and web developer. He is a proud member of YMMSS. Visit his site Get Paid Full Time Income By Reading Ads Online - YMMSS for FREE "how-to" step-by-step action guide to kick start a successful online business, tips, knowledge base articles, and more.

Posted on Apr 15th, 2007

1. Importance of a Virus Scanner: A Antivirus program can help to prevent you from becoming infected with a Virus or Trojan. It is extremely important to make sure this program is updated at least once a week, and all drives are scanned. Viruses usually are used to destroy your Data or Hardware. Where as Trojans are used to gain remote access into your system. Always scan any new files you receive as well, even if they are off a friend, you don’t know where those files originated from. ALWAYS use a little common sense when on the Internet as well. Don’t accept files from an entrusted source. Don’t go to web sites you have received spam for, they can be infected with viruses or asking you to download files that are infected. Always go only to official sites (i.e… If you ask for a web address for Norton and someone says ww.nortfix.com, that is obviously not an official site). Keep in mind that an Antivirus will only detect known viruses. It is possible that someone can create a new virus or manipulate an existing Virus or Trojan to the point it will no longer be detected by an Antivirus. As each unknown virus is discovered it is then added into the Antivirus database. Always create rescue disks for your Antivirus program, these will enable you to access your computer through MS-DOS if you are unable to access it through windows. If you do not have an Antivirus program try the HouseCall free online virus scan the link if on the top right side of this page. Also never run 2 different Antivirus . By using two different Antivirus software, sometimes the rule sets can cause conflicts in each other.. or think the other is a virus.. which can also give false positives (meaning it detects a file as a Virus or Trojan, when it isn’t one).. or not detect viruses as it should. Always delete files you do not remember downloading.

2. Importance of a Trojan scanner: A Trojan scanner is exclusively designed to guard against Trojan horses. A Trojan is a method of intrusion into a system. It is a malicious, security breaking program that is disguised as something harmless. A Trojan can grant complete access to your system to unknown parties, allowing them to commit criminal offenses with your Internet connection. If those offenses are investigated the trail will lead right to you. It also possible for them to get personal or business data and some passwords memorized within your computer. The Cleaner is a good Trojan scanner located on www.moosoft.com. Never open any file or download a file off an entrusted source, spammed web sites being one of them. It is very common for someone to set up a web site, then spam that web site saying you are infected with some virus or Trojan download this fix, or saying they have some great password cracking program, etc. Then you fall for it and your infected. Never use any war tools that require you to install something that brings up a warning on your Antivirus, why not to do this will be explained more on the IRC Newbie page. Always delete files you do not remember downloading.

3. Importance of running a Firewall: A Firewall is one of your best defenses of being hacked. That is if your using a good Firewall and have it configured right. ZoneAlarm free download is a decent Firewall. Although I would recommend ZoneAlarm Pro, which blocks a lot of commonly used hacking attempts. Another one I would not recommend is BlackIce, if you see that one run like there is no tomorrow (gives a lot of false positives). Ultimately though I would recommend running at least one Firewall, even if your computer is connected behind a gateway/router. When looking into firewalls it is a good idea to check what features it has. While one may block a number of hacking attempts, it may not block ads or cookies. Make sure to get all the details before deciding on a Firewall to purchase.

Also if you on Windows XP you can configure the Firewall they have built into it, go to start menu … control panel ….. click network connections ….. double click local area connections ..go to properties … then select the advanced tab. There you will find the XP Firewall and can enable it. You can also click on the link they provide to learn more about it. Never run 2 firewalls unless one is a software and the other a hardware. Security threats such as those dealing on the application level (your Operating System).. software Firewall can analyze that data better. Whereas hardware better analyzes incoming data from the Internet (snifters, etc.). If you have your own server.. good idea to choose a good one of each (hardware and software). If I am not running a Firewall but would like to see what connections my computer has open how do I do that? Simply go to your start menu under programs or programs/accessories you will find the MS-DOS prompt/Command prompt once you have that open type the command "netstat -an" without the quotations. There is will list the protocol of the connection TCP/UDP, the local address and foreign address, as well as the state which will show either as listening or established. Keep in mind that any connection to the Internet will show up there.

4. Importance of Windows Updates: It is extremely important to update windows. If you are not sure how to, just go to your start menu, then to programs you will see Windows Update there. Windows critical updates are related to security issues within Windows itself. These security issues can be exploited by hackers, these issues can also cause you to get infected easier with a virus if you are a Outlook Express user. As vulnerabilities are detected in Windows critical updates are released for them.
Always be sure to update Windows on a regular basis.

5. Safer Passwords: Never have Windows remember your passwords. If you ever do get an intruder on your system passwords saved in Windows can be retrieved. Instead what I recommend is saving all your passwords to notepad then saving them on a floppy disk. A simple copy and paste to use your passwords for any sites you visit, or accounts you may have online. Never use simple passwords such as names of places, things or people. Also do not use passwords that consist of either all letters or all numbers. The best passwords to have should have a combination of letters and numbers(e.g. g74npw2m5), when possible, use symbols (e.g. #^&%!). If the password is case sensitive, then use upper and lower case . Also make sure that the letters and numbers you use are not in clusters on your keyboard (within same general area on keyboard). Make your passwords longer then you may normally make them. Doing this will make any passwords you have harder for an outside party to crack. Apply this to anything you do on the Internet that requires a password. This one I speak from experience on, my last website on a free host, the password was cracked and the content of those pages changed. For many things available on the Internet you require Username and a password, if someone knows your Username or can figure it out, that is half their battle. So make the other half of their battle as difficult as possible. On Irc including characters in your passwords such as ¤, å, ¥, § ,etc… will help even more, to make your passwords harder to crack. Never use any of the following for your passwords (in whole or part): your name or a pet’s name, girlfriend, boyfriend. Anything relating to any hobbies you have. Numbers dealing with you, relatives, friends, family, etc. (birthdays ,Social Insurance Number, significant dates, etc.). All of this can and WILL come back to haunt you.

6. What is Spyware?: Software that is installed on your computer/or a virus, which gathers information about you without your consent or knowledge of it. This information can end up in the hands of advertisers, spam e-mail lists, and other interested parties. It can gather information from cookies on your computer. Cookies can store information about websites you have visited, to develop a general idea of your online activity. Cookies generally store information such as preferences from websites, and they are stored on the hard drive of your computer. If your not comfortable with the idea of someone getting any information about your online activities, as most people are. There are programs out there that can be used for either removing cookies from sites you have visited as well as programs that will detect and remove known spyware programs. Lavasoft Ad-aware is a good program for removing spyware programs. Window Washer is an excellent program for removing a lot of your online history (cookies/temp Internet files… etc…). For people who use Kazaa, don’t be surprised if that shows up on an Ad-aware scan, It will. Once you remove the spyware detected, Kazaa will fail to work without it. A suggestion for future use, switch to Kazaa Lite.

Posted on Apr 14th, 2007

A couple of days ago, I was searching for a popular eBook online.

Now I’m not going to tell you the name of this eBook for reasons you’ll understand in the next few minutes.

Okay, so here I was, opening Google, entering the name of the eBook - clicking search, and checking through the first few pages of search results.

-> Forward to Page 5 of Google

I saw a link that looked like a PDF document.

Right click -> open in new window

There, in full glory, was the eBook I was searching for!

The complete eBook, mind you, not a trial or demo - sitting there for the world to download.

And this is a product that sells for over $25 online!!

Obviously I’m not going to tell you the name of the eBook because it would not be fair to the reseller.

But it just made me realise that one of the reasons digital theft is so prevalent is simply because… its so EASY!

Don’t get me wrong. I don’t condone theft of any kind - digital or otherwise.

But would YOU shell out $25 for a product that everyone can ‘legally’ download off the 5th page of Google?

Most people would just shrug their shoulders, hit the save button and thank their lucky stars.

Result: The opposite of $ KA-CHING $ for the sellers

One of the problems with selling digital products online is that it is so SIMPLE to do. So now everyone and their grandmother wants to do it.

But most newbies have no idea that it requires only a few simple steps to ensure a moderate degree of security for your downloads.

So here I’ve outlined the five most BASIC security steps That anyone selling digital products online must take.

These will take you only a few minutes to do, and you do not need any special software or programming knowledge.

1. ZIP THAT FILE

The biggest problem arises when sellers store their downloads as PDF documents, as in my experience above.

Now you should know that Google, Altavista and many other search engines can read and list PDF files.

While this may not be a problem for those adding content to their sites in the form of PDF newsletters and reports, it also means that you must never store a product you want to SELL as a PDF file (unless it is in a password- protected folder).

It gets worse. Google also converts your PDF files into HTML documents. So ordinary browsers not only have access to your PDF file, but - horror of horrors - they can download your SOURCE FILE as well!!

The next logical step is for them to customize it with their own links, compile it and sell it or give it away.

Result: The opposite of $ KA-CHING $ for the sellers …AND the author.

A simple way of keeping your files out of the reach of spiders is to upload them as a zip file. Search engines cannot look inside zip files (yet) and list their contents.

2. CREATE AN INDEX.HTML FILE

You MUST have an index.html file in EVERY folder. It acts like a curtain that keeps your files away from prying eyes.

A folder without an index file is like a house without walls. Everyone can enter and help themselves to the valuables.

The ‘index.htm’ file is the default file that opens when you click on the link here -

http://ebizwhiz-publishing.com/

If you don’t create an index.htm or index.html file, you’d be allowing everyone to directly access the root directory of the folder where you store your downloads.

Here is a folder I uploaded to show you what happens when you DON’T have an index file.

http://ebizwhiz-publishing.com/test/

As you can see, all the files stored in it are clearly visible and ready to download.

And yes, feel free to help yourself - I won’t accuse you of stealing :-)

3. SHOW PEEPING TOMS THE EXIT

You can use a simple script to redirect peeping Toms back to your home page.

Here’s the easiest way to do it using what it called a "meta refresh tag." Add it between the Header tags like this.

< META HTTP-EQUIV="refresh" content="0;URL=http://ebizwhiz-publishing.com" >

Replace
< with <
> with >
" with "

Just replace my URL with your own in the example above and paste it into the head of your document (before your text).

You can see how it works by clicking on the test folder here.

http://ebizwhiz-publishing.com/redirect/

Now even though you click on the folder URL, you will be sent to my home page.

4. SPIDER-PROOF YOUR DOWNLOAD PAGES

To prevent search engine spiders from reading and listing the download pages that link to your eBooks add the tag below in the head of the document.

This "Robot" tag tells the spider that this page is not to be spidered or indexed. As a result it should never show up on a search.

5. CHANGE YOUR DOWNLOAD LINKS OFTEN

To prevent unscrupulous people from posting your download links on forums or message boards, change the folder or file name where you store them from time to time, even if it means having to change the download links in your merchant account.

Using these methods will give you a good degree of satisfaction, knowing that you have taken the most basic steps to protect your digital valuables - and at absolutely no cost to you.

If you want greater security and more information on plugging the security loopholes in your website, check out a selection of digital download protection tools.

Priya Shah is a partner in the search engine optimization firm, SEO & More and writes an online marketing blog

Posted on Apr 13th, 2007

If you constantly deal with bank or electronic accounts, it must be your worst nightmare–to wake up and learn that you are a bankrupt. Some crook stole your personal data and all the money you have been sweating blood for years has flown to somebody else’s account. Almost everybody must have heard that such a tradegy is called identity theft and millions of people in the USA alone suffer the same every year. Poor consolation for its victims, isn’t it?

Unfortunately, businessmen frequently are targets for identity thieves, especially online. Lots of articles on identity theft, "how-to-avoid" tips, and scary stories about the victims circulate through the Web and other media. The authors remind people again and again that they should be cautious when giving anybody their private info as well as care for their PCs’ security. But in spite of all their effort identity theft is still the most rapidly growing crime.

Software developers are doing their best, too. They can’t be of much help if somebody plainly looks over your shoulder and writes your credit card number down. It’s for you to take care and never reveal your personal info to anybody who asks for it. What they can do is to create new solutions to the urgent problems like data stealing. Keylogging spyware–the very programs that make lots of such crime possible–are pretty much written about lately. These programs secretly monitor everything users do on their PCs.

Keyloggers are used–by themselves or as a part of a virus or a Trojan — much more widely than PC users think; it is an open secret that the lion’s share of identity theft that happens online is because of keylogging spyware. The losses caused by stealing PINs, logins, and other valuable data, are well comparable with the damage from viruses. Actually, if a virus or a Trojan contains a built-in key logger module (and it often does), the end user finds himself in a pretty tough situation. The problem is that most anti-keylogging programs warn users when it is too late. The data have already been captured and sent. Why does it happen?

Almost all anti-spy software existing at the present moment works using the same scheme: spy program is detected and then blocked or eliminated. Detecting viruses or spy software is the crucial step of the whole process–all the protection depends on whether the anti-spy software is able to detect as many spies as possible. Signature bases which all these products depend on, is actually the "list" of signatures – small pieces of spy programs’ codes. Anti-virus or anti-spy program actually scans the system and compares its codes with those in signature bases. So, in this case only the spies whose signatures already are in the base will be detected and eventually "caught". As long as anti-spy software is regularly updated and the system doesn’t come across some unknown spyware product, everything is all right.

The problem is that lots of programs which could be used for stealing data are not included into signature bases right now. Some of them will never be.

There is good deal of people capable of creating something brand-new spy, unknown to anti-spyware developers. The period of time when a new spy already exists, but the updates have not been released yet, is the very time when hackers make their biggest profits.

Spy programs can be created for the specific purpose, such as industrial espionage, so they will never be represented in the base. Moreover, some monitoring programs can be used as spy programs as well, though they are not always included into signature bases. As we can see, a signature base is the weak spot of anti-spy protection; it is, so to speak, a joint in the armor. Information thieves also know about it.

Fortunately, software developers are constantly looking for new solutions. One of the new trends in anti-spyware developing is not to use signature bases as means of detecting spyware. There is three basic advantages in such an approach. First, the product gets rid of its the least reliable part; second, there is no so urgent need for updates anymore; and last, but certainly not least-–the product becomes capable of blocking the destructive activity of even unknown spyware. To read more about this new approach follow the link in the signature.

When products of such a kind become widespread, there would be much more problems for hackers in future. However, there is no guarantee that no innovative spy software appears in response.

Whether we like it or not, all malware "evolves" very quickly; new schemes are being developed, and new software which online criminals create and utilize becomes more and more malicious and "selective". New keyloggers as well as keylogger-containing viruses and Trojans, appear all the time; the losses these programs may cause to a business are enormous. That is why in some businesses there is an acute need for separate anti-keylogging protection.

Alexandra Gamanenko currently works at the Raytown Corporation, LLC — an innovative software developing company company. visit its website at http://www.anti-keyloggers.com

- Next »