Understanding your equipment | Rory Peck Trust In the last section, we identified your digital equipment as a potential threat. Here’s where you’ll dig deeper into what poses a problem and how to deal with it. A. What kinds of messages will you be sending or receiving? Is your communication encrypted? B. If the topic you are covering is sensitive, it’s likely that it will involve information that was intended to remain secret or confidential. One way to determine if you should encrypt an electronic file is to think about it as if it were a physical thing: If it was a paper document, would you shred it before throwing it out? How can I use encryption? C. Think of all the possibilities: theft, confiscation, accidental loss, a mix up at the airport, leaving your computer or mobile in another room, taking it to the repair shop, storing it in a hotel while you’re out… These are just some of the reasons you may not have a piece of technology with you at one time or another. What information is on your mobile, laptop or other devices? D.
Information Security Information Security: With CPJ Internet Advocacy Coordinator Danny O’Brien Information security means defending your data, from research notes to the confidential details of your contacts, from basic details of your itinerary to audio and video files. It means protecting data that is private to you, as well as protecting the privacy of communication between you and your colleagues or sources. The volume and sophistication of attacks on journalists’ digital data is increasing at an alarming rate. In the end, though, good information security is rarely about fending off sophisticated cyberattacks and Hollywood-style hackers. Understanding the Threat Information security poses unique challenges. What does this mean? Ask yourself: What information should I protect? Once you have written a list of potentially valuable data, ask another question: From whom are you defending this information? Protecting Communications More groups now have the power to conduct spying. Defending Your Data
Spear Phishing: What It Is and How to Avoid It | Norton Introduction The latest twist on phishing is spear phishing. No, it's not a sport, it's a scam and you're the target. Email from a "Friend" The spear phisher thrives on familiarity. Using Your Web Presence Against You How do you become a target of a spear phisher? Keep Your Secrets Secret How safe you and your information remain depends in part on you being careful. Passwords That Work Think about your passwords. Patches, Updates, and Security Software When you get notices from software vendors to update your software, do it. Be Smart If a "friend" emails and asks for a password or other information, call or email (in a separate email) that friend to verify that they were really who contacted you. And always remember: Don't give up too much personal information online, because you never know who might use it against you.
Malware - Wikipedia, the free encyclopedia Malware, short for malicious software, is any software used to disrupt computer operation, gather sensitive information, or gain access to private computer systems. Malware is defined by its malicious intent, acting against the requirements of the computer user, and does not include software that causes unintentional harm due to some deficiency. The term badware is sometimes used, and applied to both true (malicious) malware and unintentionally harmful software. In law, malware is sometimes known as a computer contaminant, as in the legal codes of several U.S. states. Spyware or other malware is sometimes found embedded in programs supplied officially by companies, e.g., downloadable from websites, that appear useful or attractive, but may have, for example, additional hidden tracking functionality that gathers marketing statistics. Purposes Malware by categories on 16 March 2011. Proliferation Infectious malware: viruses and worms Viruses Rootkits
Spyware Spyware is software that aids in gathering information about a person or organization without their knowledge and that may send such information to another entity without the consumer's consent, or that asserts control over a computer without the consumer's knowledge. Whenever spyware is used for malicious purposes, its presence is typically hidden from the user and can be difficult to detect. Some spyware, such as keyloggers, may be installed by the owner of a shared, corporate, or public computer intentionally in order to monitor users. While the term spyware suggests software that monitors a user's computing, the functions of spyware can extend beyond simple monitoring. Spyware can collect almost any type of data, including personal information like Internet surfing habits, user logins, and bank or credit account information. Sometimes, spyware is included along with genuine software, and may come from a malicious website. Routes of infection Effects and behaviors
Top 7 Phishing Scams of 2013 In 2013, global volumes of phishing emails* dropped significantly compared with 2012. This is great news: users have become more savvy to the signs of mass phishing. Also, adoption of email authentication standards DKIM, SPF, and DMARC have begun to hamper spammers’ ability to pose as trusted brands. The bad news is: even though mass phishing is down, spear phishing is not only on the rise, but is becoming more sophisticated. While mass phishing uses spam email campaigns to lure as many people as possible into this digital trap, spear phishing focuses efforts on an individual or small group of people. To target an individual, cybercriminals gather information about the person through social media or other public outlets and use that information to create personalized lures. In 2013, organized forces around the world executed highly sophisticated phishing scams to target a variety of organizations and leaders. Be safe out there, email users!
Internet safety Information security Sensitive information such as personal information and identity, passwords are often associated with personal property (for example, bank accounts) and privacy and may present security concerns if leaked. Unauthorized access and usage of private information may result in consequence such as identity theft, as well as theft of property. Common causes of information security breaches include: Phishing Phishing is a type of scam where the scammers disguise as a trustworthy source in attempt to obtain private information such as passwords, and credit card information, etc. through the internet. Internet scams Internet scams are schemes that deceive the user in various ways in attempt to take advantage of them. Malware Malware, particularly spyware, is malicious software disguised as legitimate software designed to collect and transmit private information, such as passwords, without the user's consent or knowledge. Personal safety Passwords
Telephone tapping Legal status Telephone line control device "Jitka", used in late 1960s by Czechoslovakian StB to signal line occupancy, and connect a recorder In the United States, under the Foreign Intelligence Surveillance Act, federal intelligence agencies can get approval for wiretaps from the United States Foreign Intelligence Surveillance Court, a court with secret proceedings, or in certain circumstances from the Attorney General without a court order. Under the law of the United States and most state laws, there is nothing illegal about one of the parties to a telephone call recording the conversation, or giving permission for calls to be recorded or permitting their telephone line to be tapped. However the telephone recording laws in most U.S. states require only one party to be aware of the recording, while 12 states require both parties to be aware. It is considered better practice to announce at the beginning of a call that the conversation is being recorded. Methods
Surveillance Surveillance (/sərˈveɪ.əns/ or /sərˈveɪləns/) is the monitoring of the behavior, activities, or other changing information, usually of people for the purpose of influencing, managing, directing, or protecting them. This can include observation from a distance by means of electronic equipment (such as CCTV cameras), or interception of electronically transmitted information (such as Internet traffic or phone calls); and it can include simple, relatively no- or low-technology methods such as human intelligence agents and postal interception. The word surveillance comes from a French phrase for "watching over" ("sur" means "from above" and "veiller" means "to watch"), and is in contrast to more recent developments such as sousveillance. Surveillance is very useful to governments and law enforcement to maintain social control, recognize and monitor threats, and prevent/investigate criminal activity. Types Computer Telephones Cameras Biometric
Phone hacking Phone hacking is the practice of intercepting telephone calls or voicemail messages, often by accessing the voicemail messages of a mobile phone without the consent of the phone's owner. The term came to prominence during the News International phone hacking scandal, in which it was alleged (and in some cases proved in court) that the British tabloid newspaper the News of the World had been involved in the interception of voicemail messages of the British Royal Family, other public figures, and the murdered schoolgirl Milly Dowler. Risks Although any mobile phone user may be targeted, "for those who are famous, rich or powerful or whose prize is important enough (for whatever reason) to devote time and resources to make a concerted attack, there are real risks to face." Techniques Voicemail Handsets Other Legality See also References External links