{"id":34495,"date":"2014-12-10T09:44:29","date_gmt":"2014-12-10T17:44:29","guid":{"rendered":"http:\/\/www.intego.com\/mac-security-blog\/?p=34495"},"modified":"2015-06-23T10:22:04","modified_gmt":"2015-06-23T17:22:04","slug":"safe-surfing-tips-for-os-x-and-ios","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/safe-surfing-tips-for-os-x-and-ios\/","title":{"rendered":"Safe Surfing Tips for OS X and iOS"},"content":{"rendered":"

\"Safe<\/a><\/p>\n

We recently discussed how to shop safely online during the holiday season<\/a>. All of the points in that article also apply to shopping all year round, and are good practices to develop to ensure that your online activity is safe. But there are also some other things you can do to make sure that you surf safely, even when you\u2019re not shopping. Here are three tips to surf safely online, on both OS X\u00a0and iOS.<\/p>\n

Keep Your Browser Up to Date<\/h3>\n

No matter which web browser you use, you should make sure it is always up to date. This is essential because all browsers regularly apply security updates to protect against newly-discovered exploits, many of which can be injected into websites, even popular ones.<\/p>\n

If you use Apple\u2019s Safari, have the Mac App Store app check for updates automatically, and have it install OS X updates and system data files and security updates.<\/p>\n

To do this, open System Preferences, then click App Store. Check the following options: Automatically check for updates, and, ideally, Download newly available updates in the background. Also check Install OS X updates and Install system data files and security updates.<\/p>\n

\"App<\/a><\/p>\n

If you use Google Chrome, it updates automatically in the background. However, if you run Chrome regularly and don\u2019t restart it, it may not update. If so, the Chrome menu, at the right of the toolbar, will change to green, orange or red to alert you. See this Google technical note<\/a> to learn more.<\/p>\n

Firefox also updates automatically when you launch it, if updates are available (unless you turn this feature off in Firefox\u2019s Advanced preferences). It tells you that an update is available, and prompts you to restart it.<\/p>\n

On iOS, you\u2019ll see updates to all your apps in the App Store app. Make sure to check it regularly and update apps you use to access the internet as soon as you can.<\/p>\n

Don\u2019t Get Caught by Phishing<\/h3>\n

One of the more serious threats to your online life is phishing. This is when cyber-criminals send email messages purporting to be from banks, or companies like eBay, PayPal or Apple, in an attempt to trick you into giving up your login credentials. Here\u2019s one phishing email I got recently:<\/p>\n

\"phishing<\/a><\/p>\n

This looks more or less like an email from Apple. But if you look closely, you can see a few grammatical errors (\u201cfrom other IP address,\u201d and \u201cDisabled\u201d with a capital D), but also a somewhat archaic subject line, which mentions an iPhone 3.<\/p>\n

Many phishing emails look real, and can fool you. Before you click any links, check the URLs behind them. To do this, hover your cursor over the link and wait to see the URL that displays:<\/p>\n

\"phishing-link\"<\/a><\/p>\n

If you\u2019re on an iPhone or iPad, tap and hold the link, and you\u2019ll see the URL at the top of a sheet:<\/p>\n

\"ios-phishing-link\"<\/a><\/p>\n

In both of these cases, you can see that these are not Apple URLs.<\/p>\n

The risk here is that, if you log into your account after clicking one of these links, you\u2019ll be taken to a page set up to harvest your credentials, which can then be used to empty your bank account, or buy lots of stuff on the iTunes Store.<\/p>\n

It\u2019s easy to assume that most such emails are bogus. But Apple does send you emails if you log into your iCloud or iTunes Store accounts from a new device, so you do sometimes get authentic emails like this. And your bank or credit card company may send you emails as well. To be safe, always check the URLs behind the links, or log into your account by manually typing the URL in your browser.<\/p>\n

Protect Your Identity<\/h3>\n

Not long ago, a friend of mine posted on Twitter, saying something like \u201cThis Famous Person shares the same exact birthday with me!\u201d That\u2019s an interesting tidbit to discover, but I replied to his tweet, saying, \u201cCongratulations, you\u2019ve now told the entire Internet your birthday.\u201d He promptly deleted his tweet. You\u2019re bound to give out information about your life when you discuss things with people, when you post on Facebook or on forums, or if you have a blog. But make sure you know that some of that information has a risk.<\/p>\n

There\u2019s lots of personal information about you on the web. If you use Facebook, your friends can know when it\u2019s your birthday; the month and day, but not the year. The same is the case on some other social networking services and forums. Yet your birthday\u2014the full month\/day\/year\u2014can be one of the elements you need to identify yourself. (Whenever I use my bank\u2019s telephone support, it\u2019s one of the pieces of information I have to give, for example.)<\/p>\n

You are often asked to record certain bits of information for security purposes; these are often used to reset your password, if you\u2019ve lost or forgotten it. If this information is publicly available, someone may be able the impersonate you, and get access to your accounts. One of the most common elements of information used to be your mother\u2019s maiden name, but that\u2019s been supplanted by more personal questions. Here\u2019s what Apple offers on its Apple ID website:<\/p>\n

\"Security<\/a><\/p>\n

Some of these questions may be easy to figure out. For example, if you had a nickname as a child, you, or a friend, may have mentioned it on Facebook. And you might have mentioned your best friend in high school; you might post about going to his or her wedding, for instance. You might have a discussion on Twitter about cats, you mention the name of the first one you had. And the name of your favorite sports team? Half my Facebook friends post about sports, and that would be easy to guess.<\/p>\n

There are two approaches to dealing with these questions. The first is to choose the most obscure ones, things you’ll likely never mention online. This could be\u00a0the first thing you learned to cook, the name of your first boss, the first beach you visited, or the first destination for a plane trip, for instance.<\/p>\n

The second approach is to not answer\u00a0the questions honestly, so long as you remember the answer. This is\u00a0what I call the \u201cEd Norton\u201d approach. In an episode of The Honeymooners, The $99,000 Answer, Ralph Kramden has to say who wrote the song Swanee River. His friend Ed Norton always played a bit of this when warming up, while he was helping Ralph study for the game show. But Ralph didn\u2019t know who wrote it, so he answered, \u201cHomina, homina, homa\u2026 Ed Norton?\u201d<\/p>\n