Listcrime is a one-stop-shop for reliable, up-to-date information about cyber crime, we at Listcrime.com want to give home users and small businesses the advice they need to use the Internet safely. For the most part, references within this web page appear as links to the actual site that the information came from. I revert to customary referencing when citing non-WWW based sources. A bibliography of any sources not linked will appears at the end of this web page.
The speed and anonymity of cyber attacks makes distinguishing among the actions of terrorists, criminals, and nation states difficult, a task which often occurs only after the fact, if at all. Internet is full of potential risk to your privacy and security. Every time you surf the web you leave traces of your Internet activity that can reveal your real-life identity and expose you to hackers, identity thieves and spammers. Using this information they can monitor your browsing habits and activities, spy upon you, steal personal information and exploit security holes in your system to cause damage to your computer.
REVIEW OF HOW THE INTERNET REALLY WORKS
A computer that is never connected to the internet is safe from online threats. The problem is with DSL, CABLE and other forms of connectivety everyone is connected nearly all the time. The internet is an open road to everyone. It’s like walking out of your front door and being able to see anyone or go any place.
Think of the internet as a road network. You can get in your car and drive from any place to any other place using a combination of local roads and motorways. A broadband or cable connection is your vehicle to your internet service provider (ISP) which is like a local road. ISPs are connected together using very high speed links like motorways that give you the freedom to drive any where.
PACKETS
The way that you travel the internet is through a set of standard communications protocols. These control how the information is packaged, addressed and transmitted.
Information travels across the internet in packets. A packet is a chunk of data, for example a page of text or a bit of a picture, plus an address which tells the network where the data has to go.
Everything going over the Internet is broken down into packets: web pages, email, downloads, everything. Like cars on a road, packets share physical connections and travel in streams. Big data is broken down into a series of packets and reassembled at the destination.
PORTS & IP ADDRESS
Each computer on a network has a unique numerical ID, similar to your home address, which is called an IP address. These usually correspond to a recognizable internet address (e.g. listcrime.com).
In addition, each computer that is connected to the Internet has a series of ‘ports’ that correspond to unique services that are accessible to outsiders over the Internet. For example port 80 is the one for web servers and 25 port is the port that is used to send email. Packets are addressed to a specific port at a specific IP address.
When you surf the Internet, any web resource you access can gather and record usage information about you such as your IP address, location, time of day, browser type, browser language, software configuration, operating system you are using, web pages last visited and other information that you might want to keep confidential.
IP address (Internet Protocol address) is your internet identification number. Everyone has an IP address to communicate on the Internet, in other words it's like a telephone number or mailing address. Using your IP it is possible to know your country, city, internet provider and even physical address. Hackers and identity thieves can use this information to steal personal information, spy upon you or cause damage to your PC. It is possible to restrict accessing any information or provide customized content to specific IP.
While most sites use information about OS and browser to provide a better surfing experience this information can also be used by hackers for virus attacks that use weaknesses in your system to get access to the content of your hard drive or RAM, steal personal information or cause damage to your computer.
As you surf the web, most web sites send cookies to your computer to track your Internet usage.Some cookies are "good" cookies, used for legitimate purposes, such as storing preferences, account information and remembering the choices you have made on the site. Some cookies are "bad" cookies. Bad cookies are used to track your browsing habits, purchase history, etc.
Access to information and entertainment, credit and financial services, products from every corner of the world — even to your work — is greater than earlier generations could ever have imagined. Thanks to the Internet, you can order books, clothes, or appliances online; reserve a hotel room across the ocean; download music and games; check your bank balance 24 hours a day; or access your workplace from thousands of miles away.
The flip-side, however, is that the Internet — and the anonymity it affords — also can give online scammers, hackers, and identity thieves access to your computer, personal information, finances, and more.
But with awareness as your safety net, you can minimize the chance of an Internet mishap. Being on guard online helps you protect your information, your computer, even yourself. To be safer and more secure online, adopt these seven practices.
QUICK TIPS :
Firewall – A software or hardware firewall is the first line of defense against computer hackers or intruders. You should enable or install a firewall and make sure it is configured properly.
Anti-Virus Protection - Help protect your entire PC by adding anti-virus software that monitors your computer for worms and viruses. Your anti-virus software should be configured to continually scan your computer for threats.
Anti-Spyware Protection - Anti-spyware programs are designed to block or rid hard drives of any unwanted cookies or applications. You should run checks for spyware on a regular basis to find and eliminate any new applications.
Spam Filters - Filtering software helps block and filter unwanted e-mail and blocks unwanted addresses, reducing the likelihood of receiving viruses, worms, and spyware from unknown senders. You should enable a spam filter for your e-mail program or use an internet mail service with anti-spam capabilities.
Ad-Blocking - These tools and features enable blocking or limiting of pop-ups and other types of ads. Take advantage of your web browsers' built-in features or install a third-party ad blocker.
Operating System & Software Updates - Over time software companies may release updates (e.g., patches, fixes, or service packs) to their applications to increase security. You should install these updates as soon as they become available. If your operating system or application has an "auto-update" feature, you should consider enabling it. All operating systems - Windows, Mac, and Linux - require periodic updates.
Learn How to Hack into your own system - If you really want to be proactive, you may not want to leave your system (PC) to basics such as firewalls, antivirus software and anti-spyware software. You may want to be learn how the bad guys get into your system so the you can learn how to protect your on system. There are numerous hacker websites with free tools available for public use.
1. SECURE YOUR WEB BROWSER. IT'S NOT CONVENIENT BUT IMPORTANT
Today, web browsers such as Internet Explorer, Mozilla Firefox, and Apple Safari (to name a few), are installed on almost all computers. Hackers also take advantage of Web browsers (like Internet Explorer or Netscape) and operating system software (like Windows or Linux) that are unsecured.
Information about last visited web pages can be used to track your web usage and profile your browsing habits. Spammers can use this information to send you spam and junk e-mails.
Some sites use scripts and Java applets. While most of them are useful and commonly used to enhance the appearance and functionality of web sites, some are harmful as can be used to get access to your personal information or cause damage to your PC based on the information about your computer. Information about system settings can be used to track your location and spy upon you. Spammers can track your web usage and profile your browsing habits to send you spam and junk e-mails.
Using malicious scripts and Java applets it is possible to get various information about your computer. Some kinds of your computer information (ex. screen resolution) are harmless and can be used for statistical research or providing special advertisement. But some information is not as harmless (ex information about your disks, etc) and can be used by hackers to get access and cause damage to your computer.
Lessen your risk by changing the settings in your browser or operating system and increasing your online security. Check the "Tools" or "Options" menus for built-in security features. If you need help understanding your choices, use your "Help" function. Because web browsers are used so frequently, it is vital to configure them securely. Often, the web browser that comes with an operating system is not set up in a secure default configuration. Not securing your web browser can lead quickly to a variety of computer problems caused by anything from spyware being installed without your knowledge to intruders taking control of your computer.
There is an increasing threat from software attacks that take advantage of vulnerable web browsers.
Hackers may infect your computer by using software or downloads that change your computers administrative settings or take control of your computer, steal your information, destroy your files, and use your computer to attack other computers. They may use your web browser to seek out only BAD GUY controlled servers directing you to where they want.
Every day, millions of computer users share files online. File-sharing can give people access to a wealth of information, including music, games, and software. How does it work? You download special software that connects your computer to an informal network of other computers running the same software. Millions of users could be connected to each other through this software at one time. Often the software is free and easily accessible.
But file-sharing can have a number of risks. If you don't check the proper settings, you could allow access not just to the files you intend to share, but also to other information on your hard drive, like your tax returns, email messages, medical records, photos, or other personal documents. In addition, you may unwittingly download pornography labeled as something else. Or you may download material that is protected by the copyright laws, which would mean you could be breaking the law.
If you decide to use file-sharing software, set it up very carefully. Take the time to read the End User Licensing Agreement to be sure you understand and are willing to tolerate the side effects of any free downloads.
A low-cost way attackers do this is by exploiting vulnerabilities in web browsers. An attacker can create a malicious web page that will install Trojan software or spyware that will steal your information.
Some specific web browser features and associated risks are briefly described below. Understanding what different features do will help you understand how they affect your web browser's functionality and the security of your computer.
ActiveX is a technology used by Microsoft Internet Explorer on Microsoft Windows systems. ActiveX allows applications or parts of applications to be utilized by the web browser.
Java is an object-oriented programming language that can be used to develop active content for web sites. A Java Virtual Machine, or JVM, is used to execute the Java code, or “applet,” provided by the web site.
Plug-ins are applications intended for use in the web browser. Adobe Flash is an example of an application that is available as a plug-in.
Plug-ins can contain programming flaws such as buffer overflows, or they may contain design flaws such as cross-domain violations, which arises when the same origin policy is not followed.
Cookies are files placed on your system to store data for specific web sites. A cookie can contain any information that a web site is designed to place in it. Cookies may contain information about the sites you visited, or may even contain credentials for accessing the site.
JavaScript, also known as ECMAScript, is a scripting language that is used to make web sites more interactive.
VBScript is another scripting language that is unique to Microsoft Windows Internet Explorer. VBScript is similar to JavaScript, but it is not as widely used in web sites because of limited compatibility with other browsers.
The ability to run a scripting language such as JavaScript or VBScript allows web page authors to add a significant amount of features and interactivity to a web page. However, this same capability can be abused by attackers.