Security Issues and Advice
Although the connection between your
Subscriber Unit and the Access Point may
(or may not) be encrypted by your provider,
a wireless broadband connection, like
cable or DSL service connections, is “on”
all of the time. This means that any computer
that is connected to your Subscriber Unit
in whatever manner is connected to the
Internet whenever the computer is on.
Therefore you are in constant danger from
hackers, phrequers, crackers, and other
unsavory sub-humans that crawl around
the Internet. It is almost impossible
for your WISP to protect you from such
activities. Your security is your responsibility.
There are several ways to
reduce your exposure to damages from these
sources. The following list is by no means
complete and is not intended as a primer
on security. There are other sources that
are much more complete. That being said,
here is a list to get you started:
-
Always, always, always
make regular backups of anything that
you consider irreplaceable. And when
not actually backing something up,
remove the physical copy from any
computer connected to the Internet.
Backup devices cover the spectrum
from CD's, DVD's, and tape to removable
hard drives. There are also backup
services on the Internet that will
store copies of your data that you
transmit to their facility.
-
Install a “firewall”.
Software is nice. A hardware firewall
is better. Install one between your
computer or internal network and your
Internet connection. Then install
at least a software firewall on each
computer to protect against internal
attacks if you share a network with
other people.
-
Install a good anti-virus
program on every computer. This is
very important. A good program will
catch key-loggers that will send your
bank password to the bad guys, Trojan
horse programs that will fake the
login page of your bank, and other
similar nasty things created by the
pond scum that ooze through the Internet.
-
Install something
to detect and destroy spyware, adware,
and scumware.
-
Disable Windows Messenger
unless you absolutely need it (home
users don't need it). In a business,
ask your system administrator. This
has nothing to do with instant messaging.
-
Be wary of using instant
messaging software. Such software
has a bad reputation for security.
-
On-line game playing
can create a security problem. Isolate
game machines from any internal networks
that contain important personal or
business information.
Some companies offer all-in-one
off the shelf solutions. This can be an
attractive alternative to picking one
solution for each security function. However,
an all-in-one solution rarely offers the
best of breed for each function.
There is free software on
the Web that purports to handle these functions.
Some come highly recommended by such sources
as Screensavers on Tech TV.
noWYR
assumes no liability for their use, but
we have a list
and links to some of some of the available
packages.
If you run a business and
you have important assets on computers that
are connected even indirectly to the Internet,
you should engage a competent security specialist
to secure your network.
If you install a wireless
network inside your home or business,
be sure to use the best encryption options
that are available on your wireless router
and the computers that use it. WEP is weak,
but better than nothing. WPA (available
on 802.11g gear) is better. 802.11i has
been approved by IEEE and is based on AES,
one of the best encryption schemes available.
If you can get 802.11i, 3DES (not vanilla
DES), or AES, use it.
noWYR's
Internet service is not delivered by WiFi.
We use top quality equipment that broadcasts
using a proprietary
protocol.
Your habits may cause
you more grief than a forced intrusion:
- Never open an email attachment that
you are not sure of.
- Avoid downloading anything you are not
sure of. You may get more than just the
item you wanted.
- Be suspicious of any email that wants
you to click on a link within the mail.
The most common problems come from emails
that look like they are coming from Ebay,
Paypal, Citibank, etc. claiming there
is a problem with your account and you
need to update or confirm your account
info. These emails look very authentic.
Always go through the "front door"
of your financial institutions to do account
maintenance. The email might take you
to the site of a thief who will capture
your logon information and use it to rob
you blind.
- Never put important identifying information
in an email or give it out over the telephone.
Yahoo! has several pages on some new,
as well as old, threats:
Here are links to the 3
credit reporting agencies:
|
