Designed to inform, to encourage, to entertain and to stimulate your imaginations. Enjoy!
US-CERT Cyber Security Tip ST05-009 -- Benefits and Risks of Free Email Services
Thursday, April 28, 2005
Cyber Security Tip ST05-009 archive
Benefits and Risks of Free Email Services
Although free email services are convenient for sending personal
correspondence, you should not use them to send messages containing
sensitive information.
What is the appeal of free email services?
Many service providers offer free email accounts (e.g., Yahoo!,
Hotmail, Gmail). These email services typically provide you with a
browser interface to access your mail. In addition to the monetary
savings, these services often offer other benefits:
* accessibility - Because you can access your account(s) from any
computer, these services are useful if you cannot be near your
computer or are in the process of relocating and do not have an
ISP. Even if you are able to access your ISP-based email account
remotely, being able to rely on a free email account is ideal if
you are using a public computer or shared wireless hot spot and
are concerned about exposing the details of your primary account.
* competitive features - With so many of these service providers
competing for users, they now offer additional features such as
large amounts of storage, spam filtering, virus protection, and
enhanced fonts and graphics.
* additional capabilities - It is becoming more common for service
providers to package additional software or services (e.g.,
instant messaging) with their free email accounts to attract
customers.
Free email accounts are also effective tools for reducing the amount
of spam you receive at your primary email address. Instead of
submitting your primary address when shopping online, requesting
services, or participating in online forums, you can set up a free
secondary address to use (see Reducing Spam for more information).
What risks are associated with free email services?
Although free email services have many benefits, you should not use
them to send sensitive information. Because you are not paying for the
account, the organization may not have a strong commitment to
protecting you from various threats or offering you the best service.
Some of the elements you risk are
* security - If your login, password, or messages are sent in plain
text, they may easily be intercepted. If a service provider offers
SSL encryption, you should use it. You can find out whether this
is available by looking for a "secure mode" or by replacing the
"http:" in the URL with "https:" (see Protecting Your Privacy for
more information).
* privacy - You aren't paying for your email account, but the
service provider has to find some way to recover the costs of
providing the service. One way of generating revenue is to sell
advertising space, but another is to sell or trade information.
Make sure to read the service provider's privacy policy or terms
of use to see if your name, your email address, the email
addresses in your address book, or any of the information in your
profile has the potential of being given to other organizations
(see Protecting Your Privacy for more information). If you are
considering forwarding your work email to a free email account,
check with your employer first. You do not want to violate any
established security policies.
* reliability - Although you may be able to access your account from
any computer, you need to make sure that the account is going to
be available when you want to access it. Familiarize yourself with
the service provider's terms of service so that you know exactly
what they have committed to providing you. For example, if the
service ends or your account disappears, can you retrieve your
messages? Does the service provider give you the ability to
download messages that you want to archive onto your machine?
Also, if you happen to be in a different time zone than the
provider, you may find that their server maintenance interferes
with your normal email routine.
_________________________________________________________________
Authors: Mindi McDowell, Allen Householder
_________________________________________________________________
This document can also be found at
Copyright 2005 Carnegie Mellon University
Terms of use
For instructions on subscribing to or unsubscribing from this
mailing list, visit .
--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.308 / Virus Database: 266.10.4 - Release Date: 4/27/2005
Flaw found in Firefox | CNET News.com
Wednesday, April 27, 2005
Flaw found in Firefox | CNET News.com:
"A flaw has been discovered in the popular open-source browser Firefox that could expose sensitive information stored in memory, Secunia has warned.
"Firefox versions 1.0.1 and 1.0.2 contain the vulnerability, the security information company said in an advisory on Monday. The flaw stems from an error in the JavaScript engine that can expose arbitrary amounts of heap memory after the end of a JavaScript string. As a result, an exploit may disclose sensitive information in the memory, Secunia said. "
The pressure is now on isolated Chen -- PLEASE PRAY!
Dear far-flung Family & Friends,
I am certainly no prophet (in the seeing-the-future sense, anyway), and I'm not terrible sanguine concerning politics and diplomacy, but—far as I can see—if meaningful and beneficial progress in Taiwan/Mainland relations is to take place and a costly conflict can be avoided, the two sides have GOT to talk!
So, from a purely human perspective, the stuff in this article looks very positive—no matter which of the main Taiwanese political parties one favors. If it results in a win-win solution for ALL the people, talk is always better than shooting!
I have no idea what God is working out, though, so I'll just ask you to continue to pray for the governments and the people on both sides of the Taiwan Straits. I am content to leave the outcomes in His hands—don't have much faith in politicians, anyway! ;-) My hope is in the LORD!
Pray!
Chuck
ANALYSIS by WANG XIANGWEI "When the spring weather is warm and the flowers blossom next year, the two sides should have an opportunity to reopen dialogue."
This remark by Taiwanese President Chen Shui-bian in October has proved uncannily prophetic. The two sides are about to engage in historic dialogue in a warm and breezy Beijing - but without Mr Chen.
Taiwan's two main opposition leaders will meet President Hu Jintao and other top Communist Party officials over the next two weeks in the highest-level dialogue across the strait since 1949.
Hundreds of reporters from Hong Kong, the mainland and Taiwan will cover the visits by Lien Chan, chairman of the Kuomintang, and James Soong Chu-yu, chairman of the smaller People First Party. The visits have been portrayed by international media as attempts to isolate Mr Chen and his pro-independence Democratic Progressive Party.
The cross-strait warming comes barely a month after the mainland passed the Anti-Secession Law authorising the use of force if Taiwan declares independence, causing a flurry of international concern over the increased likelihood of military conflict.
Looked at from any angle, Mr Hu has outmanoeuvred Mr Chen, with the Communist Party winning support on the mainland and in Hong Kong and Taiwan, transforming the cross-strait political balance and swinging international media comment in its favour.
It looks unlikely that Mr Hu and Mr Lien will reach any substantial agreements that could jeopardise or challenge the authority of Mr Chen's administration. Instead, their agreements are likely to be broad, calling for peace and closer economic integration between the two sides.
The meetings signal that Taiwan's two main opposition parties, representing roughly half of the island's population of 23 million, have effectively sided with Beijing over the one-China principle.
The reaction from the United States, Taiwan's biggest supporter, has been favourable. In fact, Washington is said to have played a constructive role behind the scenes.
The pressure is now on Mr Chen at home and overseas. To win back support in Taiwan, he could reconsider full and direct transport links with the mainland. But despite the pressure, Mr Chen is unlikely to recognise the one-China principle any time soon, a precondition set by the mainland for direct talks.
He could, however, put the ball back into Beijing's court by offering to hold talks on the 10-point consensus he reached with Mr Soong in February.
That consensus, believed to have been reached with US prodding, saw Mr Chen promise not to pursue changes to the constitution involving the island's official title and the cross-strait status quo. Beijing viewed those changes as dangerous moves towards formal independence.
Although the consensus did not mention the one-China principle, the mainland leadership has publicly praised it as a positive development. Finding a way for direct talks between the ruling parties on both sides of the strait should be a priority.
SCMP.com is the premier information resource on Greater China. With a click, you will be able to access information on Business, Markets, Technology and Property in the territory. Bookmark SCMP.com for more insightful and timely updates on Hong Kong, China, Asia and the World. Voted the Best Online newspaper outside the US and brought to you by the South China Morning Post, Hong Kong's premier English language news source.
Published in the South China Morning Post. Copyright © 2005. All rights reserved. --
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.0.308 / Virus Database: 266.10.3 - Release Date: 4/25/2005
Deliver Us from Wal-Mart? - Christianity Today Magazine
Be sure to read this article carefully from beginning to end before leaping to any conclusions. It's the first even-handed journalism I've seen about Wal-Mart's new "bad boy" image.
-- ChuckDeliver Us from Wal-Mart? - Christianity Today Magazine:
"Some Christians may be thankful for the values behind the Wal-Mart phenomenon, but others are voicing some of the unprecedented hostility toward the company. A biblical look at the retailer's labor issues may help Christians, among the one-third of Americans who visit Wal-Mart at least once a week, to discern whether they honor God in purchases and investments in the company."
. . .
"Discerning Christians with varying social/theological priorities will differ on whether to open their wallets to Wal-Mart. Its impact on local communities and on the environment, as well its treatment of minorities and women, also must be examined. But even with this initial look at labor issues, what conclusions can we draw?"
Monday, April 25, 2005
Yeah...don't try this at home...or anywhere else!
Saturday, April 23, 2005
Thanks to my #3 son-in-law, Jim Clay for happening upon this site...enjoy!
The 46 Best-ever Freeware Utilities
The 46 Best-ever Freeware Utilities:
"There are a lot of great freeware products out there. Many are as good or even better than their commercial alternatives. This list features my personal pick of the 'best of the best.'
"All these utilities in this list have been featured in past issues of of my free monthly newsletter 'Support Alert' More freebies are featured in every new issue. If you are interested in great utilities and freeware you really should consider subscribing.
"Last updated March 1, 2005, 12 items updated, 2 additions, 2 deletions. Currently there are actually 60 utilities listed but this report will still be called now and forever 'The Best-ever 46 Freeware Utilities.'"
Thursday, April 21, 2005
Surftp is the perfect solution for using your ftp server when you can't install a full ftp client. It is also the ideal way for web hosting providers to introduce their less knowledgable clients to FTP. Surftp is based off an opensource project and is secure and private.
PC Tools, creator of the award-winning anti-spyware software, Spyware Doctor, has released a free ground-breaking product, Hijack Guard, to protect PC users from the next generation of Web hijacker infections.
Hans Christian Andersen's life and works
- research, texts and information.
Welcome to Project Gutenberg
Pretty COOL, hey what?
-- ChuckWelcome to Project Gutenberg - Project Gutenberg:
Welcome to Project Gutenberg"Project Gutenberg is the oldest producer of free electronic books (eBooks or etexts) on the Internet. Our collection of more than 15.000 eBooks was produced by hundreds of volunteers. Most of the Project Gutenberg eBooks are older literary works that are in the public domain in the United States. All may be freely downloaded and read, and redistributed for non-commercial use (for complete details, see the license page). "
Mozilla flaws could allow attacks, data access | Tech News on ZDNet
Sure, Internet Explorer has it's weaknesses, but it's becoming evident (now that the hype has died down) that Mozilla/Firefox also has security vulnerabilities—and so does Unix/Linix.
The only way to use the internet with any degree of security is to practice safe computing by employing multiple security filters—such as an real time antivirus program, an anti spyware/malware program and a software or hardware firewall. Ultimately, we users must take responsibility for making our computers and the internet secure.
Go to http://www.johnstonz.net/wwwplaces.htm for a list of some free and effective security applications. Also check out http://www.microsoft.com/athome/security/spyware/software/default.mspx
-- ChuckMozilla flaws could allow attacks, data access Tech News on ZDNet:
"
Multiple vulnerabilities that could allow an attacker to install malicious code or steal personal data have been discovered in the Mozilla Suite and the Firefox open-source browser.
Details of the
nine flaws were published on Mozilla's security Web site over the weekend.
"Ian Latter, senior security consultant at Internet security specialist Pure Hacking, said most of the vulnerabilities are based on the way the applications handle JavaScript.
"'There are some permission issues related to running JavaScript at an escalated privilege level. They remove some of the security measures used to keep JavaScript sandboxed and allow it to potentially do malicious things to your computer,' Latter said. "
Click on the link above to read on...
Losing My Identity - Today's Christian
Wednesday, April 20, 2005
Here's a page on identity theft that you might like to check out:
Losing My Identity - Today's Christian
http://www.christianitytoday.com/tc/2005/002/12.46.html
Monday, April 18, 2005
PowerPoint gone wrong...some things are just better without it! -- Chuck
FireFox Pros And Cons
I subscribe to "The LangaList," a free and spamproof email newsletter from the computer author and columnist Fred Langa.
The current issue contains an item I thought would be of particular use or interest to you, so I'm using a form on Fred's website to send you a link to that issue.
The specific item(s) I wanted to tell you about are:
1)
FireFox Pros And Consand you can find the full issue (with the above item) here:
http://www.langa.com/newsletters/2005/2005-04-18.htmCheck it out!
The newsletter is FREE and SPAM-PROOF, and often has information you just can't get elsewhere. To subscribe, click here:
http://langa.com/join_langalist.htm#newSincerely,
Chuck
Friday, April 15, 2005
Preventing Epidemics. Protecting People. "Trust for Americas Health (TFAH) is a non-profit, non-partisan organization dedicated to saving lives by protecting the health of every community and working to make disease prevention a national priority."
Wednesday, April 13, 2005
"Real Fathers Writing About Real Fatherhood"
Do you remember the sugar cubes (of vaccine)?
Tuesday, April 12, 2005
Today's HighlightsTuesday, April 12, 2005
Spotlight: Fifty years ago today the
Salk vaccine was released for general use in the U.S. Developed by
Dr. Jonas Salk, the vaccine was used to immunize against
polio.
Franklin Delano Roosevelt, who died of a
cerebral hemorrhage on this date in 1945, became a victim of polio at the age of 39. Though he was partially paralyzed from the waist down, FDR did regain some use of his legs. When he died, he had just begun a record fourth term as US president.
Quote: "Intuition will tell the thinking mind where to look next." -- Jonas Salk Word:
inoculable: vulnerable to a disease transmitted by
inoculation
FW: Bloglines - Best Buy Has Man Arrested for Using $2 Bills
Saturday, April 09, 2005
Bloglines user
ChuckzBlog (chuckzmail@johnstonz.net) has sent this item to you.
| |
| By Zonk on buyer-beware An anonymous reader writes "Mike Bolesta of Baltimore thought he would protest Best Buy's not-so-great customer service and pay his bill with 57 $2 bills. For his trouble he got to spend some time in the county lock-up." From the article: "..Bolesta was contacted by the store, and was threated with police action if he did not pay the [installation] fee he was told before did not exist. As a sign of protest, Bolesta decided to pay using only $2 bills, which he has an abundance of because he asks his bank for them specifically. Unfortunately for him, the cashier did not seem to understand that the $2 bill is indeed legal US tender, since the bill itself is not often used. After rudely refusing to take the money, the cashier accepted the bills, only to mark them as though they were conterfeit." | | |
"Safe surfing" is a family affair. As a parent, it's all about being informed, Internet savvy, and open to the possibilities of the online world for you and your child."
Bloglines - Fake Microsoft Email Urges Windows Update, Installs Trojan
Bloglines user ChuckzBlog (chuckzmail@johnstonz.net) has sent this item to you.
Fake Microsoft Email Urges Windows Update, Installs Trojan
By rss_feedback@lockergnome.com (Aunty Spam's Net Patrol) on Aunty Spam's Net Patrol
A fake Microsoft email urges users to install the latest Windows update, and even links and takes them to a site which sure seems to be a real Microsoft website. But it isn’t. And the email actually leads to the installation of a trojan horse file. The payload file is named “Wupdate-20050401.exe”, and it will turn your Windows PC into a dedicated spamming machine, at the remote beck and call of the spammer who stands…
Let Taipei govern 'one China'
Friday, April 08, 2005
Saturday, April 2, 2005
Let Taipei govern 'one China'
WILLIAM STIMSON The passage of the Anti-Secession Law reveals Beijing's belief that the elected officials of Taiwan should not use their positions to carry out the will of the Taiwanese people. This hints at what the world can expect from Chinese leaders in years to come.
To an increasing extent, even those of us who live outside China's historic borders are going to have to begin to let the way we think, even about democracy and legality, be defined by unelected leaders of China, who operate largely outside the law.
Except for Taiwan - which has a vibrant and contentious democracy, a prospering free-enterprise economy and a president who expresses the sentiments of the people - the governments of the world are cravenly kowtowing to the mainland so that they do not risk their chance at the Chinese market.
Even the few tiny island nations of the Caribbean and the banana republics of Central America that in the past have recognised Taipei are now turning instead to Beijing and its "one China" dictate.
It would seem that "one China" has won the day. The alternative for Taiwan is to be invaded. Let us not dissect the fiction of the "one-China" idea here. Rather, let us entertain the notion and see if Taiwan can find a way to live with it, if this is what must be.
The only way I can see to do this is if we reframe the tenet in a way that is truthful to the situation between the two sides today. If the people of Taiwan are to be coerced by the world into letting the leaders in Beijing define the terms of their thinking, then let us at least not deprive the situation entirely of logic.
Clearly, if there is to be "one China", it should be ruled by the democratic government in Taipei, not the totalitarian one in Beijing.
If there is to be one system, it should be the advanced one based on law, constitutionality and sound business, banking and copyright practice - the one currently prospering in Taipei.
It should not be the archaic and lawless hodgepodge system of those reigning and conniving behind the scenes in Beijing, whose main interest is to make themselves rich, no matter what the cost to the working class or the nation as a whole. Of course, they want to extend their playing field by making a grab for Taiwan.
So, maybe we can unite Taiwan with the mainland, if the world insists on letting Beijing force this scenario. But reason has it that this new entity, the "one China", should be governed from Taipei, not Beijing. Let them lay down their arms on the mainland, dismantle their missiles, and dismiss their dictator and corrupt party functionaries. The Taiwanese can move in, organise things in a fair way, give back the farmers their land, and the workers their jobs, set up schools for the poor as well as the rich, and the girls as well as the boys. They can democratise locally and nationally, schedule real and fair elections, and let the many peoples of China, including Tibetans, for the first time in their history have the right of self-determination.
A "one China" like this - yes, we can go for that; a "one-China" that is democratic and has legality, constitutionality, legitimacy, equal opportunity for the poor as well as the rich - and freedom for all. This would probably be no problem for us here in Taiwan.
William Stimson, who has taught at the National Yang-Ming University, is a Taipei-based writer and commentator.
SCMP.com is the premier information resource on Greater China. With a click, you will be able to access information on Business, Markets, Technology and Property in the territory. Bookmark SCMP.com for more insightful and timely updates on Hong Kong, China, Asia and the World. Voted the Best Online newspaper outside the US and brought to you by the South China Morning Post, Hong Kong's premier English language news source.
Published in the South China Morning Post. Copyright © 2005. All rights reserved.
Yahoo! News - THE PURPOSE-DRIVEN LEFT
Yahoo! News - THE PURPOSE-DRIVEN LEFT: "
By Ann Coulter
"It's been a tough year for the secularist crowd. There was Mel Gibson's 'The Passion of the Christ,' the moral values election, the Christian hostage subduing her kidnapper by reading from 'The Purpose Driven Life,' and the Christian effort to save Terri Schiavo. Not only that, but earlier this year Dr. James Dobson insulted the Democrats' mascot, SpongeBob SquarePants, with impunity. "
Moore's Law turns 40
Moore's Law turns 40:
"Intel co-founder Gordon Moore recently gave his annual talk to the press, and the subject was the upcoming 40th birthday of 'Moore's Law.' Forty years ago this coming April 19, Moore published a prescient paper in Electronics, detailing the progress and likely future impact of integrated circuit technology. Later, the by now familiar summary of Moore's paper (i.e. 'transistor densities double every 18 months') surfaced and, for better or for worse, acquired the name 'Moore's Law.' You can read a recent interview with Moore here, and you can read this salvation-historical piece, in which Moore plays the role of Moses as prophet, lawgiver, and father of a great nation.
"I should note about that interview that, every time I read an interview with Gordon Moore, I'm reminded of what a really cool guy he is. "
Steer clear of Noadware - IMHO
I was very disappointed to see Noadware recommended on Familyfirst.com for two reasons:
#1 - It is NOT a very effective adware/spyware tool prevention tool (See the review at http://www.adwarereport.com/mt/archives/000023.html)
#2 - The download from the Noadware site is "free to try" (a dead giveaway). NOWHERE on the site does it mention that you have to pay to keep it. ($29.95) Why would I trust a company that hides it's true intentions behind misleading a misleading offer to do a good job of guarding my computer!
Much, MUCH better to rely on Microsoft's AntiSpyware ( http://www.microsoft.com/athome/security/spyware/software/default.mspx) and be REALLY secure!
Chuck
Bloglines - Firefox JavaScript Engine Flaw Flagged
Wednesday, April 06, 2005
Firefox JavaScript Engine Flaw FlaggedBy rss_feedback@lockergnome.com (Jeff Partridge) on Security
A moderately critical security flaw in the Mozilla Foundation’s Firefox Web browser could put users at risk of information disclosure attacks, according to an advisory from security research outfit Secunia. ADVERTISEMENT The vulnerability has been confirmed in Firefox 1.0.1 and 1.0.2, the two latest browser releases from the open-source foundation. It also affects the Mozilla suite, Secunia warned. Read more……
Direct and Related Links for 'Firefox JavaScript Engine Flaw Flagged'
Clayblog
Clayblog
Check it out! This Jim & Jenette's 7th child (4th daughter), and our 20th grandchild.
WE'RE pleased!
ALSO check out Jim's lesson on godly parenting.
--Chuck
"If you work with kids, and you need to implement character education tomorrow, and you want some immediate help, this is where to start.
"But if your character education program is cruising, and you just want some additional ideas and materials, this is also where to start. "
Milstein Child Safety Center (Mcgruff.org)
Tuesday, April 05, 2005
Yet another good site for children & parents to be aware of. Check it out!
I'm baaaack!
Greetings, faithful blog browzers!
I just made a change to a new hosting service for my domains and web sites and, though the change went smoothly enough, moving ChuckzBlog to the new server and getting it to work proved a bit more challenging. In the end, though, I prevailed! :-)
Bottom line: ChuckzBlog is back up and running on my new host's server at a new, though strangely familiar, location: http://johnstonz.net/chuckzblog.
Click on over and take a look at what's new (or just plain weird) on ChuckzBlog! You'll be glad you did! ;-)
Chuck
Speaks for itself!
Ready for a new fashion statement? Discover a great new use for the "handyman's friend!"
Gates proves real resolve in bringing spammers to justice | Between the Lines | ZDNet.com
Monday, April 04, 2005
� Gates proves real resolve in bringing spammers to justice | Between the Lines | ZDNet.com: "Gates proves real resolve in bringing spammers to justice
-Posted by David Berlind @ 2:53 pm
Home Personal Technology Security
Being somewhat of a tech-weenie -- one who's gone on endless tirades about spam -- I've always favored technical approaches over legal approaches to that which ails us when it comes to e-mail. Before most people knew what phishing was (which was only last year), I tried to sound the alarm, and, true to form, focused exclusively on technical and educational countermeasures. I've never given much credence to legal approaches for two reasons. First, the Internet's international nature creates a forbidding legal environment when it comes to passing laws and bringing transgressors to justice. Second, it didn't seem to me like any single company had the stomach to keep after the scum that are ruining the Net for the rest of us.
Unless that company is Microsoft.
Today, according to a report by News.com's Matt Hines, 'Microsoft has filed 117 lawsuits against people who it charges created phishing Web sites designed to look like pages hosted by the software giant.' 117. That's not a small number of lawsuits for one day. "
US-CERT Cyber Security Tip ST05-007 -- Risks of File-Sharing Technology
Saturday, April 02, 2005
Cyber Security Tip ST05-007
Risks of File-Sharing Technology
File-sharing technology is a popular way for users to exchange, or
"share," files. However, using this technology makes you susceptible
to risks such as infection, attack, or exposure of personal
information.
What is file sharing?
File sharing involves using technology that allows internet users to
share files that are housed on their individual computers.
Peer-to-peer (P2P) applications, such as those used to share music
files, are some of the most common forms of file-sharing technology.
However, P2P applications introduce security risks that may put your
information or your computer in jeopardy.
What risks does file-sharing technology introduce?
* Installation of malicious code - When you use P2P applications, it
is difficult, if not impossible, to verify that the source of the
files is trustworthy. These applications are often used by
attackers to transmit malicious code. Attackers may incorporate
spyware, viruses, Trojan horses, or worms into the files. When you
download the files, your computer becomes infected (see
Recognizing and Avoiding Spyware and Recovering from Viruses,
Worms, and Trojan Horses for more information).
* Exposure of sensitive or personal information - By using P2P
applications, you may be giving other users access to personal
information. Whether it's because certain directories are
accessible or because you provide personal information to what you
believe to be a trusted person or organization, unauthorized
people may be able to access your financial or medical data,
personal documents, sensitive corporate information, or other
personal information. Once information has been exposed to
unauthorized people, it's difficult to know how many people have
accessed it. The availability of this information may increase
your risk of identity theft (see Protecting Your Privacy and
Avoiding Social Engineering and Phishing Attacks for more
information).
* Susceptibility to attack - Some P2P applications may ask you to
open certain ports on your firewall to transmit the files.
However, opening some of these ports may give attackers access to
your computer or enable them to attack your computer by taking
advantage of any vulnerabilities that may exist in the P2P
application.
* Denial of service - Downloading files causes a significant amount
of traffic over the network and relies on certain processes on
your computer. This activity may reduce the availability of
certain programs on your computer or may limit your access to the
internet.
* Prosecution - Files shared through P2P applications may include
pirated software, copyrighted material, or pornography. If you
download these, even unknowingly, you may be faced with fines or
other legal action. If your computer is on a company network and
exposes customer information, both you and your company may be
liable.
How can you minimize these risks?
The best way to eliminate these risks is to avoid using P2P
applications. However, if you choose to use this technology, you can
follow some good security practices to minimize your risk:
* use and maintain anti-virus software - Anti-virus software
recognizes and protects your computer against most known viruses.
However, attackers are continually writing new viruses, so it is
important to keep your anti-virus software current (see
Understanding Anti-Virus Software for more information).
* install or enable a firewall - Firewalls may be able to prevent
some types of infection by blocking malicious traffic before it
can enter your computer (see Understanding Firewalls for more
information). Some operating systems actually include a firewall,
but you need to make sure it is enabled.
_________________________________________________________________
Author: Mindi McDowell. Some content contributed by Brent Wrisley
and Will Dormann.
_________________________________________________________________
This document can also be found at
Copyright 2005 Carnegie Mellon University
Terms of use
