Internet Safety: How do I keep my computer safe on the internet?

Search First! Then browse: Categories | Full Archive | By Date | Newsletter

Home » Viruses and Malware

Summary: Internet Safety is difficult and yet critical. Here are the seven key steps to internet safety - steps to keep your computer safe on the internet.

Virii & Spyware & Worms ... oh my!

"Internet Safety" seems like an oxymoron.

It seems like not a day goes by where we don't hear about some new kind of threat aimed at wreaking havoc across machines connected to the internet. While products other than Microsoft's are certainly vulnerable, anti-Microsoft sentiment coupled with the massive installed base make Microsoft products an irresistible target for hackers and "script kiddies".

Here are some things you can, and should, do to stay safe.

•

• Use a Firewall - A firewall is a piece of software or hardware that sits between your computer and the internet and only allows certain types of things to cross the wall. For example, a firewall may allow checking email and browsing the web, but disallow things that are commonly not as useful such as RPC or "Remote Procedure Calls". In fact, it's vulnerabilities in RPC that allowed for one of the more recent worms to propagate. (If you're using a phone to dial-in to the internet, a firewall is not as important, though it doesn't hurt to have one. A software firewall may be your only option, though.) More: What's a firewall, and how do I set one up?, Do I need a firewall, and if so, what kind?, So do I need SP2's Windows Firewall or not?.
• Virus Scan - Sometimes, typically via email, virii are able to cross the wall and end up on your computer anyway. A virus scanner will locate and remove them from your hard disk. A real time virus scanner will notice them as they arrive, even before they hit the disk, but at the cost of slowing down your machine a little. Important: because new virii are arriving every day, it's important to keep your virus definitions up-to-date. Be sure to enable the scanning software's automatic-update feature and have it do so every day. More: Viruses: How do I keep myself safe from Viruses?, I run Anti-Virus software, why do I still sometimes get infected?, When do I actually need to run a virus scan?.
"It all might seem overwhelming, but it's not nearly as overwhelming as an actual security problem if and when it happens to you."
• Kill Spyware - Spyware is similar to virii in that they arrive unexpected and unannounced and proceed to do something undesired. Normally spyware is relatively benign from a safety perspective, but it can violate your privacy by tracking the web sites you visit, or add "features" to your system that you didn't ask for. The worst offenders are spyware that hijack normal functions for themselves. For example, some like to redirect your web searches to other sites to try and sell you something. Of course some spyware is so poorly written that it might as well be a virus, given how unstable it can make your system. The good news is that, like virus scanners, there are spyware scanners that will locate and remove the offending software. More: Spyware: How do I remove and avoid spyware?, What's the best Pop-Up Blocker? Anti-Virus Software? Anti-Spyware Software?, Is Microsoft's new Anti-Spyware program any good?.
• Stay Up-To-Date - I'd wager that over 90% of virus infections don't have to happen. Software vulnerabilities that the viruses exploit usually already have patches available by the time the virus reaches a computer. The problem? The user simply failed to install the latest patches and updates that would have prevented the infection in the first place. I still see this constantly, as some of the most popular articles here on Ask Leo! deal with exploits that were patched nearly 2 years ago. The solution is simple: enable automatic updates, and visit Windows Update periodically. More: How do I make sure that Windows is up-to-date?.
• Get Educated - To be blunt, all the protection in the world won't save you from yourself. Don't open attachments that you aren't positive are ok. Don't fall for phishing scams. Don't click on links in email that you aren't positive are safe. Don't install "free" software without checking it out first - many "free" packages are free because they come loaded with spyware, adware and worse. When visiting a web site, did you get a pop-up asking if it's ok to install some software you're not sure of because you've never heard of it? Don't say "OK". Not sure about some security warning you've been given? Don't ignore it. Choose strong passwords, and don't share them with others. More: Phishing? What's Phishing?, How do I get rid of all this SPAM?!?!.
• Secure Your Mobile Connection - if you're traveling and using internet hot spots, free Wifi or internet cafes, you must take extra precautions. Make sure that your web email access is via secure (https) connections, or that your regular mail is over an encrypted connection as well. Don't let people "shoulder surf" and steal your password by watching you type it in a public place. Make sure your home Wifi has WPA security enabled if anyone can walk within range. More: How can I keep my email safe from sniffing?, Can hackers see data going to and from my computer?.
• Don't forget the physical - an old computer adage is that "if it's not physically secure, it's not secure." All of the precautions I've listed above are pointless if other people can get at your computer. They may not follow the safety rules I've laid out. A thief can easily get at all the unencrypted data on your computer if they can physically get to it. The common scenario is a laptop being stolen during travel, but I've gotten reports of people who've been burned because a family member or roommate accessed their computer without their knowledge. More: How can I keep data on my laptop secure?, What backup program should I use?.

It all might seem overwhelming, but it's not nearly as overwhelming as an actual security problem if and when it happens to you. While we might want it to be otherwise, the practical reality of the internet, and computing today, is that we each must take responsibility for our own security online.

Article C2374 - June 19, 2005

Was this article helpful? «Yes» «No»