Tuesday, October 11, 2011

Internet Security Advice.

I am going to take some time to talk to you guys about internet security. What I'm going to tell you is most likely more in dept that what you have heard before. I have been on both sides of the situation. The attacker and the defender so please take my advice when I'm giving it to you.


Lets get started. Email. Everyone has it. But what is your password like. Is it just a set of numbers or letters. If so you are at risk. Bruteforce is a method uncommonly used to crack emails. Most of the time when some one breaks into your email its because the gathered up info about you and cracked your security question. That being said ask your self this simple question. Is my answer on my facebook(or any other social network site). For example my security question use to be "What was your first dogs name" the answer was sheba. My dogs name was on facebook on one of the photos. Someone when threw my facebook because it was on public and figured it out and had access to my email. So change your security question to only something that you know and that cant be found out easily with a few clicks. Second lets change that password. Do you know what a complex password is. A complex password contains minimum EMPHASIS ON MINIMUM Letters lower and UPPER and numbers. In some cases it has special characters (example: % ).


Im going to tell you about sandboxing. We have all had to run a sketchy exe at one point in time right? Maybe it was illegal cough keygen or some sort. I am not saying do something illegal its just a example. Something like a keygen with most likely be binded with a virus. Binding is just combining two exe basically so that you have a virus and a regular executable. You can crypt the virus so its not easily detected by virus scans so be warned. Anyway back to sand boxing. It allows you to set aside a chunk of your memory (look at picture). Setting aside that memory you are able to run exes and they don't have access to the rest of your computer like they normally would.


[Image: FrontPageAnimation.gif]


Download a sandbox application here:
http://www.sandboxie.com/


So you have all done virus scans. What is TR/spy.gen2? This is a virus I am familiar with. It is always binded to exe so you run it in the shadow of another exe generally. Some people just spread it like it is. It can be set to delete its self after you run the application. After you run a exe that has tr/spy.gen2 attached to it. Kiss all your passwords stored in your browser and msn or any messenger goodbye. You just sent all your passwords to a web server or a email. You better hope that web server has been taken down. Or the user dosent look at it. This is why you should never store passwords with your internet browser. If you know you ran virus and your passwords are stored in you browser please change them all.


IMPORTANT:
Do not use the same password for multiple accounts.


Stay safe everyone.

No comments:

Post a Comment