中国的互联网
0 likes718 views
The document provides tips for journalists to safely surf the internet. It discusses threats like viruses, spyware and unauthorized access. It recommends using a hardware router, firewall software, hosts file, Firefox browser with security plugins, antivirus software, VPNs, strong unique passwords for different accounts, and being cautious of public wireless networks. The focus is on protecting devices, encrypting data, and practicing safe online behavior.
中国的互联网
- 1. Sur?ng the Internet Safely (for Journalists) Foreign Correspondents Club of China June 19, 2008 Andrew Lih http://www.andrewlih.com/ Copyright 2009 Andrew Lih
- 2. Mom’s advice: “Don’t take candy from strangers”
- 3. Net-connected computer continually doing this
- 5. What are the threats?
- 6. Sought/unsought threats ? External intrusion/attacks ? Viruses - malicious invasion ? Spyware - software leeches ? Web-based scripting ? Sensitive data transmitted over Internet
- 7. Technology
- 8. De?nitions ? URL: Uniform Resource Location http://www.foo.com/news.html ? DNS: Domain name system Convert www.foo.com to numerical address ? Internet protocol (IP) address: Unique ID of computer on Internet (like 128.51.56.122) Used to route packets across the Internet
- 9. Typical Scenario ? Computer connects to Internet DSL, Starbucks, corporate, et al. ? Gets a DHCP welcome package IP address and DNS server ? Access web page URL http://www.foo.com/news.html
- 17. Sequence ? Happens quickly (hopefully) ? Multiple “GET”s for images, ads, video, scripts, documents, audio, et al.
- 20. Incoming: Packets Connections Services Email Execute?
- 21. Unsolicited data? Incoming: Packets Connections Services Email Execute?
- 22. Where? Unsolicited data? Incoming: Packets Connections Services Email Execute?
- 23. Where? Unsolicited data? Incoming: Packets Connections Snooping? Services Email Execute?
- 24. Where? Unsolicited data? Incoming: Packets Connections Snooping? Services Email Execute? Who?
- 25. Where? Unsolicited data? Incoming: Packets Connections Snooping? Services Email Execute? Who? What?
- 26. Where? Unsolicited data? Incoming: Packets Connections Snooping? Services Email Execute? Who? What? Store cookie?
- 27. Where? Unsolicited data? Incoming: Packets Connections Snooping? Services Email Execute? Who? What? Store cookie?
- 28. Where? Unsolicited Firewall data? Incoming: Packets Connections Snooping? Services Email Execute? Who? What? Store cookie?
- 29. Where? Blacklist Unsolicited Firewall data? Incoming: Packets Connections Snooping? Services Email Execute? Who? What? Store cookie?
- 30. Where? Blacklist Unsolicited Firewall data? Incoming: Packets Connections Snooping? Services Email Execute? Who? Veri?cation What? Store cookie?
- 31. Where? Blacklist Unsolicited Firewall data? Incoming: Packets Connections Snooping? Services Encryption Email Execute? Who? Veri?cation What? Store cookie?
- 32. Where? Blacklist Unsolicited Firewall data? Incoming: Packets Connections Snooping? Services Encryption Email Execute? Who? Veri?cation What? Distinguish/ Filter Store cookie?
- 33. Where? Blacklist Unsolicited Firewall data? Incoming: Packets Connections Snooping? Services Encryption Email Execute? Conditional Access Who? Veri?cation What? Distinguish/ Filter Store cookie?
- 34. Where? Blacklist Unsolicited Firewall data? Incoming: Packets Connections Snooping? Services Encryption Email Execute? Conditional Access Who? Veri?cation What? Distinguish/ Filter Store Manage cookie?
- 35. Motivation ? Annoyance ? Productivity ? Corporate safety and privacy ? Time
- 36. 1. Hardware router ? Prevents outside traf?c to naked computer ? Share single connection, Wi-Fi ? Use NAT “shield” ? Use WPA or WPA-2 encryption (not WEP) ? Manufacturers: Linksys, Netgear, D-Link, TP- LINK, Apple, Travel: Apple Airport
- 37. 2. Firewall software ? Turn on Windows Firewall ? Only allow known connections in/out ? May need some customization ? Apple: Security preferences
- 39. 3. Hosts ?le ? Blacklist of known bad sites (built into Windows/Mac) ? HostMan (Windows) manages hosts ?le ? http://www.abelhadigital.com (Wordpress)
- 41. 4. Browser execution ? Web 2.0: no longer just a read-only page ? Javascript (AJAX, Google Docs, et al.) ? Flash (YouTube) ? Java ? ActiveX (Microsoft)
- 42. Symptoms ? Slowdown with apps/advertising ? Running dangerous processes ? Accessing resources (auto-play audio/video)
- 43. Use Firefox ? Open source browser, secure, fast ? Tabbed browsing ? Plugins to enhance safety ? NoScript ? Ad Block Plus ? Flashblock
- 45. Flashblock (no Flash unless enabled)
- 47. McAfee Siteadvisor ? Firefox plugin, warns of bad sites ? McAfee trusted name in security ? Integrates with Google searches
- 50. 5. Viruses/Spyware ? Infect computer through email, web sur?ng, or just sitting on the Internet ? Virus: destroy data, nuisance ? Spyware: sucks processor time, steals private data, becomes part of botnet
- 51. 5. Viruses/Spyware ? Get good software ? BitDefender or Kaspersky ($) ? Avira AntiVir (free) ? Ad-aware (free) ? Spybot Search and Destroy (free) ? Webroot Spysweeper
- 52. 6. Secure connections ? Virtual Private Network (VPN) ? Your news operation/company may already give you this capability ? Surf any site, no Great Firewall blocks ? Public options: HotspotVPN ($8.88/mo) PublicVPN ($59.95/yr) Witopia personalVPN ($39.99/yr)
- 54. 7. Practices ? Password discipline ? Email account discipline
- 55. Passwords ? Have three types on hand ? Trivial (“buddha”) ? Nontrivial (“h@ppybuddh@”) ? Banking strength ("6eijin9spring!1978", like Beijing Spring)
- 56. Accounts ? Throwaway - Free services (spam collects, registrations, bogus name) try BugMeNot junkbox168@yahoo.com ? General (Email, work, personal) fred.wong@gmail.com fred.wong@scmp.com ? Secure (Con?dential sources, HushMail) fred.wong@hush.com
- 57. Internet access ? Home, cafes, wireless, hotels on the road ? Consider extremely insecure ? Who can contact your computer? ? Who can read what you’re doing? ? Passwords in the clear?
- 58. Steps ? Google mail - https://mail.google.com/mail ? Note the “S” and must be that address! ? Entire session is encrypted ? Yahoo/Hotmail - encrypted login, not session!
- 59. Steps ? Firefox browser - clear private data ? Try “Flock” as 2nd “clean” browser ? Skype - http://www.skype.com ? Secure instant messaging, voice
- 60. VPN ? VPNs good for general use ? Protect against snoopers in Starbucks and on hotel broadband
- 61. Prescriptions ? Have some type of VPN accessible ? Use Secure Google Mail (https:// mail.google.com/) ? Use Skype for secure chat ? Use a broadband router at home (Linksys WRT-54G or Apple Airport) ? Use Apple Macintosh (w/Windows)
- 62. Review ? If you remember nothing else today... ? Hardware ?rewall ? Firefox and plugins ? Antivirus/Antispyware software ? Avoid Yahoo/Hotmail ? www.andrewlih.com/securitytips
- 63. Retooled Old New Internet Explorer Mozilla Firefox Yahoo/Hotmail Google mail (https) Weak password Strong passwords Cleartext transmissions VPN or secure email Naked computer Router/?rewall No security software Antivirus/Antispyware Instant messaging Skype Naked email HushMail
- 64. Andrew Lih www.andrewlih.com Wikipedia book January 2009