WASHINGTON - To read the headlines these days is to get the sense that the Internet has become a scary place.
Cyber espionage and identity theft abound while organized criminals and national spies lurk.
In recent days, Kaspersky Labs announced the of $1 billion or more from hundreds of European banks and a Stuxnet-like that has secretly and permanently installed itself on millions of hard drives across Russia, China, India, Iran and elsewhere.
As President Barack Obama at a California summit, cybersecurity is an issue of paramount importance, and one that everyone -- from governments to private firms to individuals -- needs to address.
But how can one person fight back against the skills of highly sophisticated cyber criminals or the resources of nation-states?
In truth, they can’t. If a government or criminal wants to hack your computer badly enough, they will.
But individuals can make it more difficult for the hackers, and even technically challenged Web users can prevent a lot of petty Internet hacking by simply practicing what Internet pioneer Vinton Cerf calls “.”
Here are a few "hygiene" habits you can put into practice right now:
Take a moment and try to guess the most popular password currently in use. If you said “password,” you wouldn’t be far off. In SplashData’s of the most commonly used passwords, “password” ranks No. 2. “123456” ranks No. 1. Those aren't passwords, they're wet cardboard.
If you don’t want someone breaking into your data, you have to put a firm lock on the door. Hard passwords include a mix of upper- and lowercase letters, digits and special characters. They should be at least eight characters in length and they should definitely spell out words like your pet’s name or your high school mascot. If you do nothing else suggested here, harden your password.
A second and very common mistake made by users is to create one hard password, but then never change it or use it across a variety of accounts.
To be sure, managing an ever-changing list of complicated passwords is a pain. But ultimately no password is unbreakable, and using them across accounts is an invitation for a catastrophic hack. If you’re having trouble keeping track of all those hard passwords (do not write them down), there are a variety of and ideas out there that are relatively easy and secure.
This goes for all the devices you use in a day -- your home computer, your work computer, your friend’s iPad, etc. Every time you use a browser like Firefox or Chrome, it keeps track of where you’ve been and what you’ve done. Often by default, records of every site you visited and all your uploads and downloads can be kept for days or even weeks.
It’s very easy for anyone else to view that cache and steal a detailed record of your online activities. Thankfully, it’s even easier to clear your cache once you’re done or set your preferences to not record any of your activities.
The old adage “there’s no free lunch” was rarely truer than when it comes to Wi-Fi. Increasing numbers of cafes, bars, stores or other public places are offering data-hungry mobile users free wireless access to the Internet, often even without passwords. These services might be convenient, but they’re also an open door to everything on your device. Unless you really need it, don’t use it.
Officially known as “hyper-text transfer protocol secure,” HTTPS is a variant of the HTTP web protocol that adds an extra layer of security and encryption while online. Communications between users and sites that support HTTPS are encrypted, and also authenticated, meaning that HTTPS can be used to sniff out phony websites often employed in so-called “man-in-the-middle” hacks.
Often called “thumb drives,” flash drives are small and easy to use across platforms, and can store amazing amounts of data. That’s why they’ve become so popular to trade and store data. But they can also spread viruses and malware user-to-user without your ever knowing it. Before you plug any drive into your computer, take a moment to think through the chain of users who preceded you.
This is one of those tips that most everyone knows, but still trips many up. One of the most popular and still successful ways bad guys infect your computer, or even entire networks, is through a technique called “phishing.” While there are many variants, a phishing hack begins when someone opens an email attachment that looks legitimate, but in fact immediately infects the user’s computer.
If someone sends you a file or a website you didn't ask for, no matter how much they promise "You'll love this!", don't click on it.