September 8, 2010

Firewall Basics

FirewallDiagram-smallSimply put, you are playing with fire if you aren’t using a firewall to protect your PC and home network from unauthorized access from outside your network.

The term “firewall” originally referred to a physical barricade against the potential spread of fire. In home computing terms, a firewall is a component of a computer or network that acts as a barrier between your home network or PC and the Internet. The firewall blocks unauthorized access while allowing authorized access to your systems. Firewalls can be hardware devices or based in software, both serving the same function.

Firewalls work by inspecting all traffic, both inbound and outbound, and deciding whether the traffic is denied or allowed passage based on a set of pre-established rules or policies. These rules and policies can work in one or more of several methods:

NAT – Network Address Translation
NAT is a method of connecting multiple computers to the Internet (or any other network) using one IP address. NAT allows one IP address, which is shown to the outside world, to refer to many IP addresses internally; one on each PC. NAT automatically provides firewall-style protection without any special set-up because it only allows connections that are originated on the inside network.

Packet Filter
Packet filtering blocks traffic based on a specific Web address (IP address) or type of application (e-mail, ftp, Web, etc.) .

SPI – Stateful Packet Inspection
SPI tracks the data to ensure that the inbound data were requested by the user.

Refer to your router’s user manual for instructions on how to set up your firewall. There are many online resources that discuss some of the more complex issues with firewalls, but for most home network users, the default settings will provide a very high level of security.

Windows comes with a built in software firewall that you can turn off if using a hardware firewall. Microsoft, however, recommends that you leave it on to provide protection if one of the PCs on your home network should become infected and start sending out malicious data.

/doc

Phishing

phishing-smallYou know it can’t be good when Microsoft reveals that more than 10,000 Hotmail users may have had their private information compromised through recent Phishing scams.

Phishing is the act of illegally attempting to acquire sensitive information such as usernames and passwords by posing as an otherwise trustworthy entity through email or other electronic communication. I can’t verify for certain where the term came from, but there seems to be a consensus that it is derived from “Password Fishing”. Seems appropriate.

A Phishing attempt usually begins with an email that mentions some dire emergency that you must take care of. Recent examples are:

  • Your PayPal account may be closed if you don’t visit the hyperlink that is provided…
  • Your bank account may have been compromised and you need to enter some personal information for verification…

Chase Bank has some good examples of what some of these emails can look like. Click here to check them out.

There are many more, but in most cases there is a hyperlink that will take you to an official looking website that is really a fake site designed to resemble the site you think you are on. The Phishing scheme is to get you to enter information that they want into an online form.

You need to use the same caution online as you do in the physical world. Be aware of your surroundings, don’t talk to (or trust) strangers, and keep a low profile.

Be suspicious of any online communication that tells you that something big (good or bad) will happen if you don’t click on the supplied link and take care of it. If you’re not sure, instead of using the link that is provided, go to the site using its official address and attempt to ascertain if there is really a problem. Many times, the institution will have information about the scam on their home page.

/doc

Technology Slaves

EvilPCIf you are reading this, then there is a really good chance that you are indeed a slave to technology, or at least deeply immersed. Surrounded by lifestyle-altering, digital gadgets, you are embracing technology.

Slave may be too strong a word, but we may be so reliant on our digital devices that our basic behaviors has been permanently changed. We text, we tweet, we chat incessantly on our cellphones in grocery store check-out lines, our kids use calculators for basic math, we eschew libraries for Google, and finally, when was the last time you “looked that up in your Funk and Wagnalls?”

The desire to perform tasks faster, better and more efficiently is pretty basic, and has resulted in some pretty amazing technologies. It’s all good, right?

Technology enables us to be more productive and it can help us focus our talents. But it also allows us to become detached from the world around us – the world where real things live.

Consider the cellphone and its impact on our lives, it goes with you everywhere and you would feel naked without it. This little guy allows you to be a press of a button away from everywhere that you’re not. I love my cellphone, but I don’t want it to rule my life, so I rely on two little bits of technology: Caller ID and Voice Messaging.

Technology to fight technology. Maybe I’m still a slave.

/doc

New Microsoft Courier – Tablet PC or Electronic Organizer?

MS-Courier1Microsoft has been slowly releasing information on an interesting new product, but without a clear picture of its market placement. It looks to be basically a Tablet PC with 2 hinged displays that are multi-touch sensitive and no keyboard.

Some of its features are on display in a recently released video that show its usefulness as an electronic organizer. I have to say that it has a very Apple look to it. The two displays appear as book pages with the spine of the book acting as sort of a clipboard. If this is its primary purpose, I can’t say how I would put it to use.  As a PC, even with advances in handwriting recognition technology, I’m a much faster typist, and would feel burdened without a tactile keyboard.

The code name for this new product is Courier, and understand that it is still in development so nothing is certain, but it still looks extremely appetizing. Further discussion and the just released video clip can be seen at gizmodo.com and crunchgear.com.

/doc

Microsoft Security Essentials

msseEnhance your war on Spyware and Viruses.

Now available for download, Microsoft Security Essentials (MSE) is a comprehensive Antivirus and Antispyware solution to keeping your PC safe from attacks.

This free application replaces Windows Defender and is a strong competitor for current antivirus applications. It has been in Beta release since June and has received mostly positive reviews.

If you are looking for a free solution to combat both Spyware and Viruses, consider this Microsoft offering. It is highly recommended.

/doc