Thieves steal 113 smartphones every minute -- Is yours next?

The ZoneAlarm Security Blog has some great tips for safe computing. A recent post deals with smartphone theft. Many people have no password to their smartphone. If you lose or even just temporarily misplaced your smartphone, anyone can do business "in your name" as well as gather up contact information and much, much more.

Adding a strong password (not just a simple PIN) to use the phone may be a slight inconvenience while using it, but it protects your data. This is crucial if you do any online [shudder] financial transactions with your smartphone.

Protection tips also apply to tablets and similar portable computing devices.

• Read more at the ZoneAlarm Security blog's post,
  Smartphone theft in the US: Are You an Easy Victim?

Fun games foster security awareness

The U.S. government has a great site to learn more about being smart and safe online. It's called OnGuard Online. The site includes some simple online games that let you check your "smarts" about safe computing.

You may learn something new or maybe just reinforce good habits. Either way, visit the site.

Below are links to some interactive video quizzes:

• Phishing scams
• Spam scam slam
• Invasion of the wireless hackers
• Beware of Spyware
• Laptop security
• ID Theft Faceoff

IE8 more secure than Firefox

A report on Browser Security testing by NSS Labs shows that Internet Explorer 8 security is far better than Firefox, catching 81 percent of "live threats" vs. only 54 percent caught by Firefox 3, which came in second place.

The tests include rating the browser's protection against malicious software using socially engineering and phishing attacks.

The lab tested the most recent versions of Microsoft's IE8, Mozilla Firefox, Apple Safari, Google Chrome, and Opera. Opera caught a mere 2 percent of the threats.

Firefox 3 to better indicate "safe" site

For many people, the "padlock" symbol showing in their browser status bar means "safe" or "secure". Actually, it only means that someone has bought a certificate and is using SSL (Secure Sockets Layer) -- encryption.

Since it's possible for criminals to buy a certificate and use SSL, the padlock is no guarantee that you won't get duped or have your identity stolen. What's important is to know that the site is really what it seems and to know who really owns it -- identity.

Firefox developers are now working on a different way to indicate the potential safety (or not) of a site by concentrating on identity, not SSL. In the process, Firefox looks like it will abandon the padlock symbol as an indicator of safety. This should appear in Firefox 3.0 when it comes out.

• The shape of things to come
• "Beyond the Padlock" (WMP video)

Safer Internet Day

Today, February 6, is Safer Internet Day, observed by over 40 countries. This year's focus is on mobile phones and child safety. The European Union (EU) has a special ins@fe site, which features a special worldwide blogathon for Safer Internet Day.

Among U.S. sites, the U.S. Department of Justice sponsors iSafe, with an iLearn section that aims at several groups: teachers, over-50, parents, students, and even law enforcement and prosecutors. The site also contains tips for parents and tips for students. A series of "Dig Deeper" articles seems sure to grow over time. It already includes downloadable PDF format files ranging in topic from Copyright basics to the Perils of Blogging (I'd better read that one).

Other resources:

• The FBI offers a "Parent's Guide to Internet Safety".
• At the NetSmartz Workshop, Dr. Sharon offers advice via several 2+ minutes online videos.
• Online security company McAfee offers an online guide for parents.
• Security company Symantec joins with iKeepSafe.org to present an online video, "10 Common questions about Internet safety."
• Microsoft has a whole "Protect your family" section.
• Google offers "OneKey," the kid-safe search engine use Google and filters.
• Keeping Children Safe Online (US-CERT)
• WiredSafety.org
• Keeping Internet Kids Safe (KIKS)
• Google Directory: Internet/Child Safety
• McGruff: Internet Safety tips and cons for kids
• Panel addresses net threats to kids

Family-proof your PC

Family members vary in the degree of risky computing behavior they perform. You can help lessen the chances of getting infected by taking the below steps:

• Create a separate user account for each family member.
• Only assign the type account really needed. Try to use "User" level for most. Assign "Power User" with caution.
• Never sign on and do normal work with an account that's a member of the "Administrators" group.
• Take the offensive against possible attackers. Install software that monitors and protects the computer. Many such basic software programs are free. The gamut includes general security monitors, security scanners, antivirus software, antispyware, and firewalls.
• Protect surfers. Configure privacy and security settings in the user's browser (each user has their own settings). Use a program like McAfee's SiteAdvisor, which gives sites a color-coded safety rating.
• Upgrade to the latest version of your browser. This is especially important if you use Microsoft Internet Explorer. Version 7 is more secure and nicer to use that prior versions.
• Use filtering software (aka Parental Controls) for your kids.
• Teach each user. Explain why opening messages from strangers is not a good idea, for example.

These tips are based on an excellent article, "How to family-proof your PC", by Jessica Dolcourt, CNET Download.com.

How to buy online more securely

You wouldn't mail an unsealed envelope because anyone with access to it could read the contents. And they just might steal the information or contents. So remember to take precautions when you are online. Here are a few:

• Make sure that you only buy products or services, pay bills, or provide personal data from a secure web page. This means the website encrypts the information.
• Check the web address in the browser's address bar. A secure web server address should start with "https://" ("s" for secure) rather than the normal "http://".
• Look for a "padlock" icon in the browser's status bar (in the lower right in Internet Explorer). Check the encryption level by hovering your mouse pointer over the icon.

Tip: You can find more detailed information about the security and encryption level of the site you are viewing by double-clicking on the lock icon in the location bar and viewing the
tabs (General, Details, and Certification Path) in the pop-up.
By the way, just because a website uses encryption doesn't mean it's legit. Malicious sites can mimic "good" ones and use encryption too. Be cautious. Be paranoid. It's OK ... your money and identity is at risk.