Lifehacker recently posted a great article called The Stupid Things You Do Online (and How to Fix Them). Here are some of additional comments that may also be helpful.
Stupid Thing #1: You Undervalue Your Personal Data
Did you know that when a company goes through valuation by a venture capitalist the number of email accounts is reviewed? So while you might not value your information, corporate America does.
Stupid Thing #2: You Submit Sensitive Information Over an Insecure Connection
Besides the https:// servers, users also have to have anti-malware protection that blocks keylogger programs from capturing your credit card information. Use an electronic wallet application that allows you to input credit card information without typing it.
Stupid Thing #3: You Feed the Trolls
I can’t add much more here.
Stupid Thing #4: You Leave Private Information in Your Web Browser
Sadly, the number one group responsible for committing identity theft is spouses. Other things to protect your accounts include: 1) not saving passwords in the browser, 2) don’t click those “save my password” boxes, 3) don’t use the same password everywhere and 4) use complex passwords that are changed periodically. I recommend a multi-factor password manager that blocks family and friends from getting into your accounts if they are on your computer.
Stupid Thing #5: You Don’t Keep a Backup of Online Data
Also, if you must backup data using online services, encrypt the data before uploading. You don’t know where your data is really being stored and if there are any backdoors in the service’s encryption algorithm. Remember, if there is a security breach at the online service you are still responsible and liable for compromising your customer’s private information.
Stupid Thing #6: Assuming Your Posts and Comments Are Anonymous
Unless you are really skilled, McGee of NCIS fame will find you. Corporate Human Resources department are looking more at a candidate’s Facebook account and less on a resume. So think first before you hit or click that submission button.
Stupid Thing #7: You Let People Track Your Whereabouts
It is fairly easy to track if a person is going to be home. Here’s how: 1) Pick your targets. 2) Send them informative emails and establish a Twitter and Facebook relationship. 3) use the target’s own Facebook account to find other family members of your target. 4) Build a social media relationship with those family members. 5) and sit back and wait for that “Out Of Office” reply, check all of the social media for comments from the family member and 80% of the time you will know when a house will be vacant. So, maybe you want to tell your kids what and when to place information on their fan page.
Stupid Thing #8: You Use an Insecure Password That You Rarely (or Never) Change
This is the topic closest to my heart and I have written many articles, posts, a book and white papers on this topic. When picking any password manager solution you need to also evaluate how the individual actually authenticates themselves to the service. Also there is a big difference between commercial and corporate password management products and solutions.
Dovell Bonnett has been creating security solutions for computer users for over 20 years. In order to provide these solutions to consumers as directly, and quickly, as possible, he founded Access Smart. With each of his innovations, the end user — the person sitting in front of a computer — is his No. 1 customer.
This passion, as he puts it, to “empower people to manage digital information in the digital age” also led him to write the popular Online Identity Theft Protection for Dummies. Within the pervasive nature of our e-commerce and e-business community, personal information, from credit card numbers to your pet’s name, is more easily accessed, and identity theft and fraud has become an issue that touches every consumer.
Mr. Bonnett’s solutions reduce security risks for individual users, small businesses and large corporations. His professional experience spans 21 years in engineering, product development, sales and marketing, with more than 15 years focused specifically on smartcard technology, systems and applications. Mr. Bonnett has spent most of his smartcard career translating and integrating technology components into end-user solutions designed to solve business security needs and incorporating multi-applications onto a single credential using both contactless and contact smartcards. He has held positions at National Semiconductor, Siemens (Infineon), Certicom, Motorola and HID. He is the author of smartcard articles, regularly presents at conferences, and helps companies successfully implement smartcard projects. Mr. Bonnett has been an active member of the Smart Card Alliance contributing to the development of physical access security white papers. He holds dual bachelor’s degrees in industrial and electrical engineering from San Jose State University.