Posts Tagged ‘Online Security’

The Hidden Dangers of Proxy Servers

Are you aware that everything you do on the Internet can be tracked right back to your computer through the use of your Internet Protocol (IP) address, which is a code assigned to your by your Internet Service Provider (ISP). This address is unique to you and your connection, at any one time nobody else will be using the same IP address anywhere in the world and logs are kept of who is using what IP address and when they used it. You may already know about your IP address and are doing your best to protect yourself by using a proxy server. A correctly configured proxy server will appear on the Internet to be just another user, even though in reality there could be thousands of people behind it. While it will be possible to track you back as far as the proxy server it will be impossible to go any further.
 
That is assuming it is a correctly configured proxy server and not one run by a malicious webmaster intent on harvesting as much information as possible!  You see when you use a proxy server you are putting a lot of faith in the people running it, and how well do you really know them?  Probably not well at all, I will highlight some of the issues and how you can best avoid them.
 
Firstly how is your data sent? Most public proxy servers work without encryption, this means that any data you send through the proxy server is sent ‘as is’ so if you are typing in your bank login details and password then those will go through the proxy server. So be sure to never visit any sites which require your personal information while using a proxy. This includes your credit card details, so don’t go buying anything over an unencrypted public proxy, if you do you might just as well advertise your card details in the local newspaper.
 
It is not just criminals and hackers who use the information from proxies, you might be quite surprised how many large companies use such a method for market research. If a big retailer sets up an open proxy they can analyse the information going through it, track your buying history and tailor specific marketing campaigns directly at you. This might seem a bit extreme, but it is only an extension of the existing loyalty card scheme, I presume you know that your supermarket loyalty card only exists so they can track your spending patterns?
 
Next go read through the proxy sites ‘Terms and Conditions’ as well as their ‘Privacy Policy’, if you don’t like something or feel even the slightest level of suspicion move on! If at all possible choose a proxy which has a good reputation, one that IT experts use and that has a reputation for being safe.
 
If you are using a public proxy it should be exactly that, completely public, they should not require you to signup, to provide details of any kind. Obviously this does not apply to private proxies where you are paying for a premium service, however still the information a private proxy should collect is no more than that which is needed to bill you for their services.
 
If you consider your online security to have any value consider using a premium proxy service for cloaking your IP address, preferably one which operates with the highest levels of encryption available and which wipes all server logs so there is no record of even your encrypted activities. There are many proxy options available, but in truth very few which are actually worth using!

 

Online Security

The online world is one of two faces, the side where we find what we need, book holidays, save time with online services and generally enjoy ourselves. Then there is the darker side, where individuals and organisations are trying to infiltrate our lives without permission, steal our identities, money and generally destroy everything we worked hard for! So yes while we can say the Internet has given us many things, we must not discount the threats it has produced.

Being safe online these days is much harder than even 12 months ago, the methods deployed by criminals become more taxing and skilful by the day. The speed at which these new hacking techniques are being deployed far outstrips the speed at which patches are released for the software we are all using. Even the most respected browsers from Microsoft and Firefox fall foul to many a threat, despite their respective parent companies spending millions of dollars on development. It is therefore even more vital these days to be proactive in your attempts to thwart online criminals, relying on your free antivirus software alone is only going to lead to disaster these days!

Perhaps the most common, and most dangerous, system infiltrations involve key loggers and hidden P2P applications. A system compromised in this way will be working as a server, distributing pirate software or pornography to other users around the world. This takes place without your knowledge, and often with your anti-virus software still running! This is because the program has altered the way your Virus package works, so it reports it is working but really it is not. At the same time key loggers on your computer will record every thing you type, every login, every email, all your bank details will be recorded and sent back to the criminals.

Always ensure you are running with a software firewall on your computer, and preferably a hardware firewall on your modem or router too. These of course must both be setup correctly, if they are configured to allow all traffic then they are effectively not there!

Further you should ensure you are running a complete Anti-Malware package, this will cover virus, phishing, adware, key-loggers and Trojans at the same time, the better packages will include full firewall capabilities in the same package. Ensure you computer is fully patched, which these days requires you to be running with licensed software. Never use pirate copies of operating systems or Anti-Virus products, it may sound like obvious advice but it is amazing how many people trust their online security to the very people who do most of the hacking in the first place!

Finally install IP changing software with encryption technology so as to hide yourself online, as if they can’t find you they can’t attack you!


Kaspersky Lab eStore

 

Is Current Antivirus Enough?

There is a general argument currently being broadcast that Anti-Virus software has ‘had its day’ because the pace of virus releases is outstripping the capabilities of Anti-Virus software Vendors to issue updates to counteract them.  It is getting to the point when you would need to update your Virus database minute by minute! (a recent study by Panda Security, based in Bilbao, Spain, detects an average of 37,000 new viruses, worms, Trojans and other security threats per day!)

Look, if you said to me that folk should stop wasting their money on stand-alone anti-virus applications then I may agree with you to some point. The one thing that is outmoded is the term ‘anti-virus’.

Precisely speaking, the main online threat isn’t called a virus, a more suitable term should be ‘malware’ and it is time we started to conform to this new term.

Online threats consist of viruses, adware, key-loggers and trojans, all residing under the common term of spyware.

I understand the term ‘anti-virus’ is a heavily marketed term and when you mention the term ‘anti-virus’ to PC illiterate and green users they know precisely what you are talking about, but when you talk about ‘malware’ they often give you that glassy stare, you know, the kind of stare that screams ‘What the hell are you speaking about?!’.

Most anti-virus applications now offer protection against malware and other spyware related threats as well, so it is really daft to keep calling them anti-virus applications, they are essentially anti-malware applications.,

The older definition based anti virus protection is pretty much over as the latest anti-malware solutions are moving towards behavior based detection, however it would be suicidal to scrap anti-virus solutions just because of the fast evolution of new threats.

Scrapping your anti-virus solution would be reckless and plain dumb, just like exclaiming we should stop patching the security issues in software and leave them un-patched because the threats exploiting these failings are developing way too fast.

Should we stop installing security systems in our homes because new, more advanced burglars are born each day? If you can protect your system against known threats why not do it?

It’s correct, spyware develops much faster than the anti-malware solutions, but known malicious software gets recycled on the internet time after time. Protecting yourself against a known variant means you cannot be attacked by it again and trust me it is not uncommon to be attacked by the same variant frequently. This means antivirus software still plays an urgent role in your defense against malicious software, it also implies that anti virus program engineers are still detecting new threats at a particularly high rate.

New variants may infect a lot of PCs before they get noted, but once the anti-virus sellers release an up to date signature file to all their users, they are at least constraining the dissemination of the spyware and forestalling uninfected users from getting infected.

Scrapping anti-virus solutions means systems are left insecure, and if infected they could, for instance, be making a contribution to the processing power of bot networks like ‘hurricane’ (a gaming network bot), without your knowledge or consent, if nothing else this could use up your available bandwidth and slow down your computer.

At least an infected system can be cleaned once a new variant has been detected, thus you are pro-actively taking a bot network down bit by bit and making it tougher for the malware to spread any further. Remember, an infected machine becomes a distributor for new variants of the malware. Murdering a known variant means you are forestalling it from mutating and spreading.

It is true, the debate that the value of anti-virus software is declining is hogwash.  Improve it, don’t just scrap it, giant companies should stop putting reckless ideas into the minds of ordinary users, they should stop the throw-away-your-anti-virus-program-and-buy-our-software kind of selling. The internet is dangerous enough as it is, so don’t go encouraging folk to throw away their anti-malware applications, not even in today’s arena of sophisticated malware attacks. Anti-malware applications are frequently the sole line of defence that is’s available to beginner net users.

Right now the best thing you can do is be sure to run industry leading Anti Virus Anti-Malware Software, preferably with full firewall capability, and encrypt your online activities through a respected anonymous proxy server.

 

Kaspersky Lab eStore