{"id":12541,"date":"2013-05-09T09:58:47","date_gmt":"2013-05-09T16:58:47","guid":{"rendered":"http:\/\/www.intego.com\/mac-security-blog\/?p=12541"},"modified":"2015-03-26T16:23:30","modified_gmt":"2015-03-26T23:23:30","slug":"6-ineffective-ways-to-protect-yourself-against-online-attacks","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/6-ineffective-ways-to-protect-yourself-against-online-attacks\/","title":{"rendered":"6 Ineffective Ways to Protect Yourself Against Online Attacks"},"content":{"rendered":"

\"medium_2418973883\"<\/a><\/p>\n

You’re a clever person. You’ve learned a lot about computer security and think you understand how things have gone so wrong. So you’ve modified your behavior in corresponding ways to try to make yourself safe. But attackers are clever too, and there are many of them working cooperatively to thwart defenses. Thus, some of your behavior modifications may not be as effective as you think. Here are six ways you think you’re protecting yourself:<\/p>\n

1. Use Less Popular Software (aka Security Through Obscurity)<\/h3>\n

You may think that using an obscure browser that no one else has heard of might decrease the number of active attacks you run into. The reality is that even unpopular software can be vulnerable to attacks. For example, if your browser allows plugins, you\u2019re still vulnerable to the majority of the attacks out there. Unless you consider any sort of active scripting (such as Java, Javascript, and Flash) to be totally outr\u00e9 and live in a land of only text-based web content, then yes, you\u2019re probably okay on the web-based threats. But for most of us, that sort of web browsing isn’t ideal or feasible.<\/p>\n

2. Use Really Old Software<\/h3>\n

Retro-computing is not feasible or particularly effective as a defense against malware. That ancient installation of MS Word is more full of holes than your favorite artisanal Gruyere. There\u2019s a reason there are still ancient macro viruses floating around \u2013 just because it\u2019s old doesn\u2019t mean it\u2019s forgotten. People who don\u2019t update are putting themselves at risk for both direct attacks and malware.<\/p>\n

3. Assume an OS’s Built-In Security Features Protect Against Everything<\/h3>\n

Several major software vendors got bit by this assumption, and Pintsized was the gift that awaited them<\/a>. Security settings are an awesome thing and we believe everyone should use them to full advantage, but your protection should not stop there.\u00a0The other thing about built-in software security settings<\/a> is that they\u2019re often not on by default. You need to enable things like passcodes, OS firewalls, and various other types of security and privacy protections. You’ll need to get friendly with the settings menu of any software you install to see if there are things you can do to make your data more secure.<\/p>\n

4. Update Software Only When Popups Remind You<\/h3>\n

Is that popup really from the vendor itself, or is it malware that\u2019s trying to scare you into installing? It\u2019s better to check the vendor\u2019s site<\/a> to verify the latest version against what\u2019s on your computer to make sure everything is on the up and up.<\/p>\n

5. Devise the Strongest Password Ever…and Then Use It Everywhere<\/h3>\n

There are myriad ways to get password security wrong<\/a>, unfortunately. And the cost is potentially high. Devising strong, unique passwords<\/a> can be a real pain in the butt, but password managers<\/a> can help you achieve login peace of mind.<\/p>\n

6. Rely on the Well-Lit Corners of the Internet for Safety<\/h3>\n

Much like in real life, avoiding dark and foreboding corners of the Internets will only go so far to protect you. Many of the threats of the past few years, including Flashback<\/a>, have used compromised, legitimate sites to silently push their code on unsuspecting visitors.<\/p>\n

The motive of many attacks these days is financial, and it\u2019s safe to say that if there\u2019s an idea for ways to protect your machine without using extra security tools that has been espoused by more than a couple people, malware authors have thought of it, too. And they probably gotten around that protection by the time the fourth or fifth person caught on to the idea. Luckily, there are also lots of defenders out there working cooperatively, both within and across companies, to develop tools that can help augment safe security behavior.<\/p>\n

Further Reading:<\/strong><\/p>\n