O'Reilly Book Excerpts: Internet Annoyances
Internet Security Annoyancesby Preston Gralla
Editor's note: The internet is an "equal opportunity annoyer"--no matter who you are or what you're doing online, eventually its many quirks may leave you feeling a bit disenchanted with the whole Net experience. When that happens, pick up a copy of Internet Annoyances, Preston Gralla's latest book for O'Reilly, which is chock-full of numerous fixes to what ails the internet, just like the samples you'll find here.`
Chapter 9: Security Annoyances
Ask people what concerns them the most about the internet, and security will most likely top the list. Spyware, worms, Trojans, and viruses have all become accepted hazards of using the internet, as have "phishing" expeditions, which route you to a phony web site that steals your personal information and passwords.
But there's no reason you should be bedeviled by these annoyances. This chapter gives you the tools and techniques to prevent or do away with them—it delves into special software solutions, shows you how to configure your home router for maximum security, tells you how to construct your own personal firewall, and more.
General Security Annoyances
Get free security checkups
I installed a firewall on my kid's PC, but being the paranoid parent that I am, I want to make sure I've locked out the bad guys. How can I give it a simple checkup?
For the most comprehensive check of your online security, head to Gibson Research (http://ww.grc.com) and perform the ShieldsUp test, which scans your PC for browser vulnerabilities, open network ports, and similar security flaws (see Figure 9-1). Also perform the Leak test, which checks your PC's vulnerability to Trojans. The Symantec web site (http://www.symantec.com) also offers a free online security test and a free online virus scanner. Click the Symantec Security Check link on the Downloads section of the main page to run their security scan. However, be wary when following the Security Check's advice—if it detects an older version of Norton AntiVirus on your system, for example, it will say you're at risk for getting a virus, even if your virus definitions are up-to-date.
Figure 9-1. ShieldsUp performs a comprehensive test of your online security. Here, it checks for open ports.
Microsoft's free security tool uses a different approach. The Microsoft Baseline Security Analyzer checks to see whether you've installed the most up-to-date Microsoft security patches and service packs, and looks for improperly configured security settings. To download it, go to http://www.microsoft.com/downloads and search for "Microsoft Baseline Security Analyzer."
Get Free Security Alerts
Do you want to be immediately notified when a new online danger, such as a nasty new worm or virus, is on the loose? Do you want information on how to combat it? The federal government's Computer Emergency Readiness Team (CERT) maintains a web site (http://www.cert.org) with all the latest information and sends out free email alerts.
Browse in perfect anonymity
Wherever I go online, I get the feeling someone is watching, tracking what I do and the pages I visit. The Attorney General is enough of a Big Brother; I don't want to have to worry about who's watching me on the Web as well.
You're right; web sites can gather an astonishing amount of information about you. They can track your online travels, tell what operating system and browser you're running, find out your machine name, peer into your clipboard, uncover the sites you've visited, examine your History list, and delve into your cache. They can also examine your IP address to learn basic information about you, such as your geographic location. To get a sense of the kind of information web sites can find out about you, head to the Anonymizer web site (http://www.anonymizer.com) and click the Free Privacy Test link. It will display your IP address, your current geographic location, the contents of your Windows Clipboard, and more (see Figure 9-2). It's pretty sobering stuff.
Figure 9-2. Go ahead—scare yourself. Head to this site and see just how much of your personal information can be exposed.
The best way to make sure that web sites can't gather personal information about you and your computer is to surf anonymously—that is, use an anonymous proxy server that sits between you and the web sites you visit. When you use an anonymous proxy server, your browser doesn't contact a web site directly. Instead, it tells a proxy server which web site you want to visit. The web site sees the IP address of the proxy server, not your PC's IP address. It can't read your cookies, see your History list, or examine your clipboard and cache because your PC is never in direct contact with it. You can surf anonymously, without a trace.
To use an anonymous proxy server in concert with your browser, follow these steps:
Find an anonymous proxy server. Hundreds of free, public proxy servers are available at http://www.atomintersoft.com/products/alive-proxy/proxy-list. The web site lists information about each server, including its uptime percentage and the last time the server was checked to see if it was online.
Find the server with the highest percentage of uptime. Write down the server's IP address and the port it uses. For example, in the listing 22.214.171.124:80, the IP address is 126.96.36.199 and the port number is 80.
In Internet Explorer, select Tools → Internet Options, click the Connections tab, and click the LAN Settings button.
Click OK and then OK again to close the dialog boxes.
Figure 9-3. Set up Internet Explorer to surf the Web anonymously.
Now when you surf the Web, the proxy server will protect your privacy. Keep in mind that proxy servers can make surfing the Web much slower,.
You may also want to use a web-based, anonymous surfing service. For example, Anonymizer, Inc. (http://www.anonymizer.com) offers free and fee-based services. Each service installs a toolbar within Internet Explorer, which you can use to turn on anonymous browsing. The fee-based service costs $29.95 per year and offers benefits beyond those of the free service. For example, it shields your IP address and lets you set custom anonymity levels for different web sites. It also lets you completely block certain web sites.
Another solution is to download software that will automatically configure your browser to use anonymous proxy servers. It will also automatically find the fastest one, without any setup on your part. For example, GhostSurf (http://www.tenebril.com/products/ghostsurf) uses multiple anonymous proxy servers and always checks for the fastest one. The software costs $29.95, but you can download a free 15-day trial version if you want to check it out.
Pages: 1, 2