A recent USA Today tech article focused on the invasion of privacy many will face when traveling to the Olympics in China this summer. The warnings, aimed mostly at federal officials and business people, are telling travellers that the Chinese government will most likely attempt to penetrate the electronic devices (cell phones, PDAs, and laptops) being brought into the country. The Chinese government intends to steal information and plant bugs to gain access to U.S. networks. Just about anyone that has political influence, a government position, or works for a large company is at risk to have their privacy completely compromised.

The Overseas Security Advisory Council states that Chinese government frequently uses these tactics to gain access to personal and official computers. China’s Internet and wireless networks are run by the government, which has access to any bit of data being transferred. A laptop being searched by airport security or left in the hotel while attending the day’s games are vulnerable to attack. The control that the government has over the Internet allows them to invade any one’s privacy since they have to surf the web through their network.

This is a major privacy threat for anyone travelling abroad for the Olympics. Any information you have on you is subject to Chinese inspection. Further, travelers coming home. should have their systems checked before connecting their network.

So now where does it go from here? Consider travelling without any of these electronics. If you have to bring them with you, make sure no personal or official information (of a sensitive nature) is stored on them. And if none of those precautions can be taken, then make sure a good proxy server is used while in China, and have everything on the computer’s drive encrypted.

Post to Twitter Tweet This Post

InsideCRM.com recently published an article that outlines 50 tips to maintain your privacy and avoid ID theft or other cyber crimes. This list is comprehensive and includes great advice on how to keep yourself protected. Everything you do online is susceptible to scams and other privacy risks; these tips could end up being the difference between security and theft. The article does not focus primarily on Internet privacy, it also discusses the ways to stay protected when offline. The full list can be found in the article, but the following are some of the major points.

  • Internet Privacy
    • Don’t save e-mail address or password settings (log-in information) for frequently used sites such as online banking.
    • Use anti-virus protection.
    • If using wireless, set up a password and secure the connection.
  • Credit and Financial
    • Check you credit report about 2-3 times per year.
    • Use a credit card for online purchases instead of a debit card.
    • Never use your Social Security Number as a pin or password.
  • General Privacy
    • Don’t use your Social Security Number as an identification number (such as an employee number) or write your SS# on checks. This number needs to be secured and given to as few people as possible.
    • Understand pretexting and the danger it poses to your privacy.
  • Cell Phones and Online Phones
    • Check and understand your providers Privacy Policy and frequently stay informed on updates to the policy.
  • Other Rules to Follow
    • Keep your Social Security card in a safe and secure place. That place is not your wallet or purse either!
    • Shred documents that contain personal information such as birth dates and credit card numbers.
    • Look for “https” when making an online transaction. This is different from “http” because the “s” indicates a secured and encrypted connection so only you and the site have access to the information.

The tips and tools on the site are very helpful. As stated before, these can be the difference between having your identity stolen or maintaining your security. Many of these tips are common sense for some people, but the fact is identity theft and cyber crime are a problem. If you already know to keep your Social Security Number secured, that’s great! Now take the next step and do something else on the list to protect yourself.

Post to Twitter Tweet This Post

Posted in: Protecting Personal Information | Comments Off

We’ve all heard about Phishing; i.e. getting phony e-mails asking you to give up important personal information. We also all know about scams involving telephone solicitation.

Now we have Smishing which is getting personal information by sending bogus text messages to your phone. According to an article in the Kansas City Star, warning consumers about a new, multifaceted identity theft scam where victims are targeted by phone, text messages and e-mails, we now have to worry about fake text messages.

Here’s my question: “How many of us get text messages from their banking or brokerage firms?” My guess is not many at all. Therefore why would anyone believe a text message could be from their financial institution, especially in this age of ever more clever identity theft criminals?

It is sad that people get taken in by these thieves. However we all must continue to be cautious when we get a suspicious communication regardless of the way it was transmitted. The first step in preventing identity theft is to be skeptical of any communication that asks for personal information. Without willing takers, identity thieves would have a harder time collecting this information.

Post to Twitter Tweet This Post

With the invention of MySpace and the vast amounts of other social networking sites, the entire landscape of the Internet universe has changed. People freely connect with long lost companions or meet new people that share similar interests; this allows a once distant community to come together.

With this power, also comes risk. Many people join social networking sites and openly post personal information such as birth dates, or post photos of their personal lives. A new breed of criminal has also evolved with social networking; one that can break down privacy barriers and research their prey by visiting their MySpace of Facebook pages and learning just about everything they could ever want to know.

Maintaining your privacy and avoiding identity fraud are not difficult things to accomplish, but do require some common sense. Many people post more information than needed, letting people know everything possible without having to even know who this person is. Many sites have been created to help users protect their social networking privacy, but a few important tips to remember when considering what information you want available to the world include:

  • Providing just enough information. You want your friends to be able to locate and contact you, but you don’t need to put your entire life story so that anyone with eyes and a PC can learn everything about you.
  • Making your profile private so that only people you have befriended can view the information and photos. Some sites allow networks of people to view your information, but a user should consider limiting their private information just to their friends.
  • Be wary when adding external applications. For the most part don’t add any, and if you do already use some be sure to keep only the ones you actually do use on a consistent basis. These apps are developed by outside parties that have no affiliation with the site, and most likely do not include any sort of privacy policy.
  • Do not use the same password for your social networking sites that you would to access your e-mail or any sites that contain personal information, such as banking sites.
  • Frequently check the privacy policies for any changes that may concern you.
  • THE GOLDEN RULE: Never assume something you post on the Internet is completely private. If someone wants the information badly enough, they will find it. Always use common sense when posting sensitive information on a website.

Post to Twitter Tweet This Post

This is a difficult question to answer. Of course, Internet privacy should be a major concern to anyone who boots up a computer and checks their e-mail. With modern technology comes a new generation of criminals and misfits who will use it with bad intentions.

Even if criminal activity isn’t involved, some of the sources you, as an Internet user, think you can trust will let you down. Internet Service Providers (ISP), search engines, and marketing companies all use this technology to track your IP address and slowly build up a profile about your surfing habits so they can advertise more effectively…that is correct, your own ISP keeps tabs on your internet habits.

You can safely assume that you have zero privacy while surfing the Internet, and privacy protection goes above and beyond the latest Norton update. Privacy on the Internet is not given to you. As an Internet user, you must proactively search ways to protect your Internet Privacy while online.

This brings us to the million dollar question…who can you trust?

Many places offer Internet privacy tools, but what do they have in mind? Is it a company that cares about your privacy? Knowing who you can and can’t turn to is important. Internet privacy tools can be found just about anywhere, but this is an area where you get what you pay for. Would you trust a stranger on the streets to walk up to you and give you a brand-new television? Then why would you use a tool that is meant to protect your privacy without knowing who is behind it?

While you can never be truly anonymous, you can be protected. Some company will always have your information, especially since have to pay your bills. In the case of using a company’s protection tools, the important thing to know is how will they use it? Will they sell it to the highest bidder, or will they follow their privacy policy and not jeopardize your information. The point of using their products is that they stand behind them and guarantee them to work. I feel strongly about knowing who is taking my money and I want to have a face and a name to stand behind the product. I want to know the people who I am trusting with my personal information.

Post to Twitter Tweet This Post

Two recent articles published by Computerworld discuss the Electronic Privacy you have, or in this case don’t have, while travelling across U.S. borders. The second article is more of an update so that you can travel and know how Customs agents can invade your privacy. Customs does not need any form of reasonable doubt or suspicion to search a person’s electronic devices, especially laptops and PDAs. Any type of device that can, “store large amounts of data, ideas, e-mail, chats and Web-surfing habits,” is fair game. The Ninth Circuit ruled that these devices can be searched and seized without a warrant or probable cause, and the Customs Department went on to say that anyone travelling can, and most likely will, be searched for having these devices. The main focus was centered on traveling with laptops. Not that this automatically makes you a criminal, but it is putting your personal privacy in jeopardy. Searches made at the border are “reasonable simply by virtue of the fact that they occur at the border.” Searches are not limited to hard-drives, meaning any internet usage is also subject to being searched, including internet history, e-mails, cookies, etc.

This brings about some questions…

  • What is the extent of the search and seizure of laptops?
    • Will they take my laptop and when can I get it back?
    • Will my company information be subject to the search? This violates many company’s privacy policies, especially when dealing with personal information or financial information (such as credit cards and bank accounts).
  • Where is the information that Customs copies kept?
    • How long is this information kept?
    • How is it disposed of? Or is it disposed of at all?

Do Customs agents have any protocol to follow at all, or are these questions something of little importance? Depending on the amount of information being stored on a hard-drive, many people can lose their anonymity and privacy. The Association of Corporate Travel Executives (ACTE) is warning travelers to keep limited amounts of information while traveling, and to keep your computer protected from privacy threats. The ACTE is concerned that corporate data could be copied and lead to security breaches and numerous other privacy risks. This means a database of customers’ names and information, which at one point was completely confidential, can be seen by anyone who works for Customs…

Post to Twitter Tweet This Post

Barack Obama has a massive database of over 2 million people’s personal information. Yahoo! News reported that Obama has built up a database of personal information collected from his supporters through MySpace, Facebook, and his campaign website…Even if his run at the White House fails, he can sell this list to the highest bidder, whether it be to another canidate or any special interest group he chooses.

The information he holds includes: addresses, phone numbers, names of friends, and views of certain issues. After persuading about 800,000 people to enter information on his campaign website, it is estimated that it is now worth nearly $200 million…which could eventually be sold for a profit. According to the article, this information is more accurate than past years because his supporters are voluntarily giving it up. Obama has found most of his information by social networking, where he is lightyears ahead when compared to both Clinton and McCain.

People probably do not stop and think that when they enter the information on Obama’s website that it could potentially be used long after the elections are over. Anything a person does on the internet can never be deleted. Somewhere in cyberspace those photos, or that blog post, will live on forever. In this case, it doesn’t fall into the blackhole of the internet, but instead is closely monitored by whoever owns the information….talk about a privacy risk!!!!!!!!!!!!!

Another reason why you should remain anonymous while using the internet…

Post to Twitter Tweet This Post

While doing some research, I came across this article from the Privacy Rights Clearinghouse and needed to share it. With the emphasis placed on Internet privacy and protection, it is also important to remember to protect yourself from privacy threats in your everyday life.

This article discusses the uses of credit card vs debit card (and also touches on other areas like store cards, and gift cards, etc). Basically…don’t use or have a debit or checking card. The article gives greater details as to why you should use credit over debit. Some of the main points include:

  • Debit cards do not offer the same quality of protection against fraudulent use that credit cards do. Debit card fraud must be reported within 2 days, and even then banks can wait up to 2 weeks before refunding your stolen money–which means missed bills and possibly an overdrawn account.
  • Credit cards allow you to stop payment or dispute a charge, while debit cards are drawn directly from your checking account and the transaction is relatively quick.
  • Debit cards may or may not require the user to know a PIN code, they can use a signature instead. This is important for two reasons:
    1. Someone who steals or find a lost debit card can use it at will without having to know the PIN.
    2. When signing for an item instead of entering a PIN, it takes the same processing route as a credit card, meaning your transaction will not show up right away in your account.

As far as making online purchases, those should all be done with a credit card, basically for the same reasons listed above. Sites can be hacked, or set up entirely with malicious intent to steal information from the user. Again, it is easier to deal with fraudulent use of a credit card opposed to a debit card. The article references using an ATM only card to access your checking account, which is different than a debit card because you can not use it at retail outlets and must always enter your PIN.

The article also includes the following “Tips for Limiting Your Loss:”

  1. Protect your cards, account numbers, and PINs. Keep your cards safe and be sure to sign the back of the card as soon it arrives. Take home your receipts (which may have your account numbers printed on them) and shred them instead of leaving them in the store’s trash. Memorize your PIN; don’t write it on your card or write it on a note in your purse or wallet. And always position your body so that no one can see the keypad at the ATM or checkout counter when you punch in your number.

  2. Timely reporting is a must. To limit your credit card loss to $50, you must report unauthorized charges within 60 days. For debit, ATM and other electronic transfers, you only have two days to minimize your loss.
  3. Monitor your credit card charges and bank accounts frequently. Online access is an easy way to monitor even daily activity.
  4. For online purchases use credit cards rather than providing your debit card, especially when dealing with an unfamiliar site.
  5. Checks should be written only to those you know and trust. Remember, your check includes your bank routing number and account number. This is all a thief may need to access your bank account.
  6. Suspect payments, especially money orders, you receive from an unknown source. For tips on how to spot a phony money order, see the US Postal Service, September 2005, fraud alert: www.usps.com/postalinspectors/fakemo.htm.
  7. Caution is advised when depositing money orders, checks, cashier’s checks or other payments you receive from an unknown source. Deposits you make may not have cleared, even if your bank balance shows the funds have been added.
  8. Beware of suspicious-looking ATMs and checkout-lane card readers. Unbranded ATM machines in convenience stores and the like can be scams. Also, some recent high-profile thefts have involved the practice of “skimming,” in which account data from cards’ magnetic stripes were secretly copied from checkout-lane card readers and later used to create counterfeit cards.

Privacy threats can come from any source so being vigilant of what is going on with your accounts is important. Using proxy servers and other tools while using the Internet doesn’t mean you are protected from other sources of fraud and criminal activity.

Post to Twitter Tweet This Post

An article by the Malaysian Star Online recently released an article about protecting yourself while using the internet. The main focus was placed on phishing, trolling, and web bugs. According to the article:

“Phishing refers to Internet scams whereby e-mails are sent purportedly from banks or other companies, asking users for sensitive personal information, which are then used in identity thefts.”

“Trolling is when someone uses specific phrases in a chat group to “bait” and target people who respond in a certain way.”

“Web bugs are tiny image files that contain programmes that install themselves undetected on your computer and transfer information back to the source.”

They also go on to discuss other things such as cyber-stalking. The article discusses how women are at a higher risk for facing these threats, which is discussed in greater detail throughout the rest of the article.

Of course these threats, and many more, affect anyone who uses the internet. Cyber criminals are smarter and more technologically advanced than ever, and are using that to their advantage. About 15 million people are affected by some form of identity theft every year. Those numbers increase every year, most likely because people do not pay attention to the threats facing them while using the internet. Using Norton, or whatever anti-virus program, isn’t enough. Anti-virus programs only protect a fraction of the threats. Proxy servers and other tools are very useful to protect yourself while online.

Some basic tips include:

Protecting your password

Keeping up-to-date records of your accounts/bills

Check your credit report regularly

Do not use debit cards to make online purchases, use credit cards instead.

Do not post or give out prvate information to a website without researching it first (i.e. reading the privacy policy, etc)

Use elaborate, complex passwords.

Come to PrivacyView’s Support/FAQ section for more information on general internet knowledge and ways to protect yourself.

Post to Twitter Tweet This Post

Reports from the UK tell that the Information Commissioner has ruled that users/customers must consent and request to “opt-in” to Phorm’s advertising system. ISPs must have consent from their users to send targeted advertisements. The ICO decision was happily accepted by many people, including Which Technology editor Matthew Bath. Mr. Bath went on to state, “Broadband customers would have been kept in the dark that their web browsing behaviour was being collected and sold to advertisers. This means consumers will now be fully aware of what the system does before any data is collected.”

Post to Twitter Tweet This Post