Technology

Geek Tip: I was recently asked, Is it safe to click a link in an E-mail? 

The short answer is No.

However if you're willing to put extra work in, here's how you can read a URL (link) in an E-mail client or web browser.

-When I hover my mouse over the link, does it say it's going to go to the same place it looks like when I'm just reading in the article

-Does the website have funny random characters at the end: www.unusualwebsite.com/lkjsdf9eje7d - Does it have random characters at the end of the URL? This is a warning sign, and should be leaning you against clicking.

-Looking at the content of the E-mail, if you can tell what the content should be, and you see www.somewebsite.com/article/12345/gohere. Try going to www.somewebsite.com and see if it's contextually relevant to the E-mail content.

-It's probably going to be safe to open, but last protection will be make sure you use chrome to open the website

1. Keep all software patched and up to date. 

Especially software that touches the internet. Why? This protects you from things automatically installing without any User prompt.

Your operating system updates: Windows Update/Mac Software update

Any software that touches the internet must be as up to date as possible

Web Browser: Chrome (preferred), Firefox (second), Internet Explorer or Safari (Last)

Programs that are launched from the web browser/internet

Uninstall Java if you don't need it (or are unsure). If it's installed, you have to ALWAYS keep it updated.

PDF reader (Adobe Reader especially - Set it to install automatically)

Adobe Flash in IE and Firefox (If it's available you're prompted to update when you reboot your computer)  

2. Don't click/download install anything from the internet you didn't go out and specifically go and look for. 

Why? This protects you from Phishing scams/social engineering tricks to trick you into installing something you shouldn't.

E-mail

Never open an attachment in an E-mail. 

If you break this rule, you need to be able to: Verify you are opening a data file (.doc, .xls, .txt etc. file) and not a program file (.exe, .vbs, .com etc. file)

Never click a web link in an E-mail

If you break this rule, you need to be able to: Identify the difference between what the URL looks like, and where it actually takes you when you click it. Use the popup or bottom left corner of the window to see where it's going to take you BEFORE you click.

Web Browser

Never open a program from your Web browser (Internet)

Program Install prompting for User name and password

Unless you know you're in the process of installing a safe program, the UAC (windows), or ID/Password prompt (Mac) is warning you to stop: The program creating this prompt will have the ability to do anything it wants to your computer, write/delete files, send E-mail's as you, collect your Windows Username and password.

3. Antivirus is your last line of defense.

You shouldn't need it unless you have broken either Rule 1 or 2. However if it's needed it will only catch between 80-95% of viruses. The 5-20% of viruses that it misses is usually the latest virus and the one you're clicking on right now.

You need to: Know what Anti-virus software you already have installed on your computer

You need to: Be able to identify if a program window is a window from a locally installed program, or a web browser window faked to look like a program window.Use the icon in the taskbar for the active window to tell what program it is.

https://www.eff.org/deeplinks/2012/10/why-we-have-open-wireless-movement

The only issue we need to solve is how we protect our network from being used for illegal activity and us being blamed for it.

Here's their response to that issue:

If your phone is hot, it's burning battery life.

Here's a great free app to monitor what is running on your Android phone.

How often does a company sell your E-mail address to someone, or get hacked? I keep track of the ones that affect me personally and document it here. Feel free to add yours as well.

Warning: If you don't use a password manager, and have different passwords at every website which are randomly generated passwords at least 9 characters long your web based accounts will eventually be hacked. It's just a matter of time: Clever doesn't work anymore. c13v3rp@$$w0rd doesn't work.