For many freelancers, the computer takes on the role of filing cabinet, safe, encyclopedia, calculator, time sheet... Essentially, it houses all the important aspects of our day-to-day activities.
The upshot of course is that the livelihood's toolkit needs to be kept safe from the likes of viruses, worms, Trojans, spyware, phishing attacks, and hackers. The best way to do this is to never allow the PC to be connected, physically or wirelessly, to the outside world; however, this isn't the most practical approach. The second best option is ensure that your system is protected against known and future nasties. By following a few simple guidelines, you can operate in a much safer environment, which will certainly allow any contractor to breathe a sigh of relief.
These tips are not in order of importance. These 10 steps require a little time to set up, but the investment will pay itself back in full when colleagues are screaming about how they should have protected themselves before they were attacked. Just try not to smirk too much.
*Update against security vulnerabilities
Most freelancers use Microsoft operating systems on their work computers. Whether you are in this camp or not, it is important to remember that all software is flawed at some level. None can be perfect as it is written by people, and we all unfortunately make mistakes. Updating against security vulnerabilities is a lot easier today than it has been previously.
For Windows computer users, you need only visit http://windowsupdate.microsoft.com and run an automated scan of your computer to display which security patches are recommended for download.
It is important that these security patches are put in place as soon as possible. Some of the biggest viruses, such as Slammer, Blaster, Sasser, have taken advantage of these security holes. More information available here: http://www.sophos.com/support/knowledgebase/article/32.html
* Ensure reputable anti-virus (AV) software is installed and automatically updated on PC.
Most reputable AV solutions are capable of detecting all known viruses. What differentiates products is the ease-of-use as well as detecting non-virus threats, such as spyware, Trojans, etc.... Ensure your AV can check files as they are opened (often called real-time protecton) and detects spyware applications. Spyware is mostly used to track and collate information about the user's computer behaviour, but it can also steal confidential or banking details. The collected information is then sent to an unauthorised third-party. What makes spyware very dodgy is that info is tracked without the computer user's consent or knowledge. The information collated and recorded might be what pages a computer user visited as well as other behavioural patterns.
* Ensure reputable AS software is installed and automatically updated.
We are seeing a strengthening relationship between virus writers and spammers. Our honeypots show us that approximately 40% of all spam comes from what we call zombie machines, or a computer whose security has been compromised and can be controlled remotely by a third-party. Without the user's knowledge, a spammer can access computer via backdoor left open by virus or other security vulnerability, and then use it to send out spam. Particularly attractive are computers that are constantly connected to the web - via broadband, for instance.
* Ensure you have firewall protection in place and that it is set to block all ports that you don't need.
Ports are like windows in a house. If you are not using them, you don't just leave them open; you close and lock them - otherwise, it might look inviting to robbers, vandals, etc.. Firewalls basically block unauthorised communications between the outside world and your machine, and will also help ensure that people are not accessing your computer without your knowledge.
* Do not open any unsolicited file attachments
Many of today's viruses are programmed to replicate without attracting any attention. They can appear to be coming from someone you know, even if that person is not infected. This is called spoofing an email address. They can also make attachments look very legitimate with carefully chosen wording. So, it is wise NEVER to open an attachment that you were not expecting to receive. Simply contact sender and ask them about attachment before you open it.
* Beware of phishing scams.
Phishing is where a message with a web link is spammed out. It will be ignored by most recipients, but can potentially steal cash from those that fall for its bogus website. Phishing sites today look very professional and often pretend to be a banking site or financial institution. It is strongly recommended never to respond or use a link that comes in an email. Instead, go to your bank's website via your browser by typing in their main page. If uncertain about a seemingly legitimate email, contact your bank by phone and ask them to verify the authenticity of the communication.
* Don't buy stuff from unsolicited emails
Should you receive an unsolicited email and want to learn more about the product or service they are flogging, it is much better to type in the address in the browser and visit it. First, it helps to secure your privacy by not letting them know that their spam led you to the site. It also might save you from being duped by a phishing scam. Always confirm who you are giving details to, and if you receive an email from the son of a Nigerian politician asking for your assistance in moving millions of dollars out of the country then the chances are that it is a scam...
* Only send and receive plain text email.
Set up your email application to send and receive plain text emails only. This means that you will not receive highly formatted emails with graphics. Spammers can use graphics to keep them informed about whether an image is displayed on your screen. By catering to the lowest common denominator, you are making it more difficult for spammers and hackers to target you specifically.
* Back up data regularly
Data, we have learned in this information age, is more valuable than hardware. If a laptop is lost or stolen, you know you can fairly easily replace the hardware, but its contents (files, contact information, passwords, etc) may be gone forever - unless you back up your data regularly. There are threats out there which can destroy or amend data it finds on a computer, so make sure that you backup vital data regularly. Remember to run a virus scan with all the latest anti-virus updates just before you do your back up. This will help ensure that you are not backing up corrupted data.
* Use passwords and change them regularly
Passwords can be a method of keeping your data safe from prying eyes, but it is wise to use long non-words as opposed to your favourite colour or animal. Hackers can try and break passwords by using dictionaries to try and break them. You can separate the characters with numbers for added complexity or by mixing lower case and upper case letters. Remember to change your passwords at least every three months.
Article kindly provided by Sophos
Sep 3, 2004
Email this article
Printer friendly page
Previous Page
