home » solutions »
As social networking sites like Facebook grow in popularity, they also become popular targets for phishers and other cyber criminals. Worryingly, very few users understand how to protect themselves and one in four people registered on SN sites are still exposing themselves to identity fraud. (Research by GetSafeOnline)
Below are some important safety tips for users, along with links to related tips for organizations.
- Be suspicious, trust nobody.
Hackers can fake messages to make them look like they're from your friends. Be alert for clues such as strange links, unusually bad (or good!) grammar/spelling or things your friends wouldn't normally say or send. Invitations to join new networks can also be social engineering or phishing attacks in disguise. If in doubt, contact your friends first to check.
- Don't post personal information online - anywhere.
This should go without saying but people are still taking silly risks when it comes to identity fraud. Never ever publicly post your address, email or date of birth. Sites like LinkedIn are often assumed to be 'safer'. They are not - don't make the mistake of posting your entire resume or employment history, or details about your company or workplace that could be used for attacks.
- Don't violate your company's AUP.
Check what the company policy is and make sure you adhere to it. Don't use your work email address for networking sites and think twice before you post. Facebook-related firings are on the rise and the permanency of online posts can give employers an incriminating and easy-to follow digital paper trail. Never try to bypass web filtering controls - doing so leaves networks vulnerable to attacks, the consequences of which could lose you your job.
- Beware of fake sites and profiles.
Hackers can 'spoof' links to popular domains. Avoid compromising usernames and passwords by using bookmarks (or typing URLs in directly). Never click a link in a message or email invitation and remember that at least one in five Facebook profiles are fake.
- Be careful with apps and widgets.
3rd party apps are not validated by Facebook or other sites and could do serious damage to your PC - and your online friendships. Some are designed to distribute adware, some to generate revenue, some to attack your friends and some to give miscreants access to your profile. If you use them, check their individual privacy policies carefully.
- Don't install everything you're asked to.
All downloads are potentially dangerous and executable files should always be treated with suspicion, particularly if they are purporting to be videos. Most videos share a few common formats so if you are prompted to download and install a codec or plugin first, it's probably a Trojan in disguise.
- Check site policies and procedures carefully.
Some will give your email address to companies that will send you spam and some will even scan your address book and spam your friends as well. Block cookies as most sites use them to track user preferences and habits. Make sure you know how to get things removed or report abuse - before you need to.
- Use (but don't trust) privacy controls.
The more you publicly reveal in posts and profiles, the more vulnerable you are to scams, spam and identity theft. Change search settings from 'everyone' to 'friends of friends' and untick the 'view my friends' option. Never assume that privacy means complete protection either - social networks don't offer any kind of guarantees regarding non-disclosure of your personal details. Assume everything is public and permanently recorded. Think twice before you post.
- Don't sacrifice your safety for the sake of popularity.
Social networks are about making and keeping in touch with friends - not popularity contests. No-one except you really cares how many friends you have. Don't accept friend requests from people you don't know or trust.
- Passwords matter
Use a strong alphanumeric password and don't use the same one for registration and login so you can still verify your credentials if your account is compromised.
|



|