Monday, April 25, 2005

Effective Passwords

Passwords are the computer world’s virtual equivalent to your car, house, and office keys. Passwords protect your personal and business information. They control access to the files on your computer, your e-mail account and your online shopping accounts.

Passwords are your first line of defense against an ever increasing assortment of computer hackers and criminals armed with sophisticated tools trying to break into your accounts to steal your money and your identity.

Even though most people recognize the importance of passwords we don’t pay as much attention to them as they deserve. We wouldn’t dream of storing our valuable purchases in an unlocked car while we go back into the mall, but we often use weak passwords that effectively leave our computer accounts unlocked for the clever hacker.

Weak passwords can be cracked (in computer lingo, passwords are cracked and computers are hacked) through a couple of different methods.

Brute-force cryptographic programs try every possible combination of letters and numbers. Dictionary attacks are computer programs that attempt to log in by using thousands of commonly used passwords from a password dictionary.

Hackers also routinely use a simple approach known as “social engineering.” This involves researching personal information about you (home address, children’s names, pet names, favorite sports teams, etc.) and using that information to guess your password.

Phishing uses forged e-mails to dupe you into clicking on a link and providing account and password information.

Spyware, viruses or other malicious software that bypasses your anti-virus program (you do have an up-to-date anti-virus program on your PC, right?) can capture your keystrokes and transmit them back to the hacker. Network sniffing software can capture your account and password information from inside the electronic packets as they traverse the Internet.

Fortunately there are a number of basic steps you can take to protect your passwords.

No personal information

Don’t base a password on any form of personal information that can be easily learned about you.

No common words or phrases

Avoid using any common words that are found in a regular dictionary or even phrases like “redridinghood.” Password dictionaries contain hundreds of thousands of commonly used words and phrases. These clever programs also use simple techniques like reversing the letter order. So while you might think using “drowssap” is clever and easy to remember, the cracking program will solve that one easily.

Length is good, numbers and special characters are better

Generally speaking, longer passwords (if you can remember them without writing them down) are better. Longer passwords utilizing a combination of letters, numbers and special characters like @, +, &, and * are best.

One effective technique is to use a simple form of cryptography, substituting numbers for letters and throwing in a special character. For example, rather than “icecream”, substituting 3 for e, 1 for i and @ for a results in 1c3cr3@m, a pretty strong yet still easy to remember password that would defeat most cracking schemes.

Another effective approach is to use a phrase that means something to you. I might pick “crazyforgolf” and then do the substitutions, ending up with “cr@zyf0rg01f”.

Protect your password

Don’t give your passwords to anyone, especially over the phone or through e-mail. Never enter your password on a Web page that doesn’t display the lock icon identifying that the page is encrypted.

Following these steps will protect your passwords and, in turn, protect your personal and business information.

Questions and comments on this article can be directed to Jim’s e-mail, jim@shokora.us. All of Jim’s technology columns are available online at his blog: http://jec1230.blogspot.com.

Saturday, April 02, 2005

Starting your home computer network

So, you finally got tired of sharing (fighting over) your family PC and invested in a second computer. The new PC works great and there’s a lot less stress over whose turn it is to get on the computer. That is, until it’s time to get on the Internet.

Your original PC is still the only computer connected to your broadband cable/DSL modem for Internet access. So when it’s time to surf the Web, check e-mail, or do some online shopping you’re back to sharing a computer. Ideally, both computers would connect to the Internet. That’s where a home computer network comes in.

A home computer network will let you share that Internet connection, not to mention other resources such as files and printers. With a small investment in networking equipment and cable (available at your favorite local computer dealer or electronics store), setting up a home network is fairly easy and quite affordable.

[Note: The following information applies to cable and DSL modem connections to the Internet. Although you can set up a home network that shares a dial-up connection, you’ll get faster and more reliable results from broadband.]

First, let’s review some basic networking terminology. Computers and networking equipment communicate using a special language, or protocol, called Ethernet. Most personal computers have an Ethernet adapter inside and an Ethernet connection or port on the back. One end of an Ethernet cable (looks a lot like a telephone cable) snaps into the Ethernet port on the back of the PC. The other end of the cable connects to the same kind of port in a networking device called an Ethernet switch. All of the computers cabled to the same Ethernet switch can talk to each other.

An Ethernet switch acts like a traffic cop at a busy intersection, directing all the communications between the connected computers. This is called a “wired network,” similar in operation to the wired telephone network. Alternately, a wireless computer network uses wireless Ethernet adapters and a wireless switch to send data over radio waves, similar to the way wireless cell phones communicate.

The heart of your new home computer network is a router/switch. About the size of a large book, this home version of an Ethernet switch usually has one network port, which connects to your cable/DSL modem (often identified as the uplink port), and four Ethernet switch ports, which connect to the Ethernet cables that go back to each of computers in your house.

This is the one part where building a home network can get a bit tricky. Those Ethernet cables must run from the room where each computer is located back to the room with the router/switch. You can find Ethernet network cabling in a variety of lengths at most electronics and home improvement stores. An easy solution might be to run the cable over your drop ceilings or even to drill a few inconspicuous holes through the walls.

But, depending on the unique characteristics and construction materials of your home, running these cables can be difficult or downright impossible. That’s where two other networking technologies come into play.

One is the wireless capability we talked about earlier. By purchasing a wireless network adaptor for your PC (most laptop or notebook PCs already have a wireless adapter) and adding wireless capability to your router/switch you can avoid network cabling. This works especially well if one of your home computers is a laptop. You’ll be able to roam all around the house, possibly even outside, and remain connected to your home network and the Internet.

A relatively new alternative to wireless networking is called powerline networking. A powerline network utilizes the electrical cabling that is already installed to every room in your home. You plug a small device called a powerline adapter into the closest electrical outlet, and then plug the computer’s Ethernet cable into the powerline adapter. Back at the router/switch you plug another powerline adapter into an electrical outlet and use an Ethernet cable to connect the adapter to one of the switch ports.

Whatever networking technique you choose, your last step is to configure your PCs to communicate through the router/switch. Instructions for this step are provided with the router/switch documentation.

Once your PCs are connected and talking to the switch, your home network will be complete. Each PC will have uninterrupted access to the Internet and to the files and devices shared between them.

No more fighting. The only computer battle in your house will be when you challenge your teenager to a head-to-head game of NBA Live or Nascar Thunder over your new network.

For more information on home networks, check out the Web sites of these popular router/switch manufacturers:
http://www.linksys.com
http://www.netgear.com
http://www.belkin.com
http://www.dlink.com

Tips for Shopping Online

Thinking of shopping online, but worried about privacy and credit card theft? If you follow a few simple rules and apply a small dose of common sense, shopping online is actually very safe.

1) Always use your credit card. Many consumers think it is safer to pay by check or money order, but under federal law, your liability for an unauthorized or fraudulent credit card charge is limited to $50. What’s more, most credit card companies allow you to completely deny a charge for misrepresented, damaged, or undelivered products. If you pay by check and the goods never show up, your recourse will probably be less convenient and more costly.

2) Make sure the ordering/payment section of the site is encrypted to prevent hackers from intercepting your credit card number. You can verify this by looking for a lock symbol at the bottom of your browser window or by checking that the Web site address has changed from HTTP://... to HTTPS://...

3) If you’re still uncomfortable giving your credit card number online, check with your credit card provider for a new service called “single use” credit card numbers. With this technology, the retailer receives a randomly-generated credit card number that disguises your actual account information. Because the number is only valid for that purchase, it’s useless to hackers and fraudulent merchants.

4) Shop online with a name you know and trust. Many of the stores where you go for your “brick and mortar” shopping experience also have online stores. Circuit City, Sears, K-Mart, Wal-Mart, and other well known companies are all very interested in protecting their reputation and making sure you have a positive online shopping experience. If you want to shop with an unfamiliar online retailer, inquire first at the Better Business Bureau Online (http://www.bbbonline.org/).

5) Trust your instincts. If it doesn’t feel “right,” it probably isn’t. You can easily tell if the online vendor is serious about protecting your financial information. Reputable online merchants explain the steps they’ve taken to ensure your privacy and guarantee a secure transaction. Amazon.com, for example, provides a “safe shopping guarantee.”

6) Keep good records. In the event of a dispute these will help to verify your claim. Print out each page of the ordering process and print copies of any confirmation e-mails you receive. If you use the telephone to provide payment information, be sure to record the date and time and the name of the person taking your information.

7) Don’t buy from spammers who send unsolicited e-mails. Reputable sellers will never ask you to provide or confirm credit card information via e-mail.

Internet shopping can save you time and money and open up a world of products and services that you might not have available where you live. And you certainly won’t be alone. According to the U.S. Department of Commerce, online consumers spent $26 billion last year.

By following the advice offered above, you can safely join millions of people in today’s virtual shopping environment. For more information, check out these informative Web sites:

http://nclnet.org/shoppingonline/
http://www.safeshopping.org/
http://www.ftc.gov/bcp/conline/pubs/online/cybrsmrt.htm

Open Source Software

If you are among the millions of American consumers who have purchased a PC in recent years, you know that there is more to purchasing a home computer than buying hardware. You also need software for each of the tasks you want to perform with your new PC.

Some of the software you need comes “bundled” with the computer purchase. But more often than not, you find yourself back at the computer store, Wal-Mart, or Circuit City spending more money on commercial software products. Over time, the investment in software rivals the original hardware investment.

Wouldn’t it be nice to have a viable, affordable alternative to spending your hard-earned dollars on software? Thanks to a growing alliance of independent computer programmers, you do—it’s called “open source” software.

All software starts with source code, the set of instructions programmers develop that tell the computer what tasks to perform. The source code is “compiled” into a special “binary” format that only the computer can read. This “compiled” or “binary” format gets copied to your PC when you take the software CD home from the store and follow the installation instructions.

You can’t change the compiled program and you can’t see the underlying source code. This protects the original source code from being copied and used in a competitor’s product. Manufacturers guard their source code carefully, as the unique features and quality of their software allow them to successfully market their products to you.

Open source software is completely different. Open source programmers freely distribute their source code and encourage other programmers to review and modify the code. They believe software developed in a collaborative or community model will ultimately be more useful and error-free.

The premise of open source software is that anyone can download and use the software for free. The most famous open source program is Linux, a personal computer operating system developed as an alternative to commercial operating systems like Microsoft Windows. In fact, many of the Web sites you visit today are stored and processed on Linux-based systems.

The open source movement has grown dramatically over the past ten years and there are now thousands of open source software applications. Many are based on the original Linux operating system, but the number of Microsoft Windows open source applications is growing.

OpenOffice (www.openoffice.org), for example, is a complete office productivity package that is similar to Microsoft Office. It includes full-featured word processor, spreadsheet, presentation, drawing and database applications. OpenOffice files are compatible with Microsoft Office, which allows files to be shared between users of both packages.

Here is a small sampling of the hundreds of Windows applications available in the open source format:

7-Zip (http://www.7-zip.org) can compress and decompress ZIP files.
ClamWin (http://www.clamwin.com) is an anti-virus program with an Outlook e-mail plug-in.
Mozilla (http://www.mozilla.org) offers their award-winning Firefox Web browser and Thunderbird e-mail programs.
PDFCreator (http://sourceforge.net/projects/pdfcreator/) generates PDF files from documents created in other office productivity programs.

A few words of caution are necessary. Unlike commercial software, open source software does not include an 800 number for technical support. Also, some open source software is best left to the more technically inclined. It’s not always as easy to install and configure as commercial applications.

For more information on the open source software movement check out these Web sites:

www.opensource.org
www.sourceforge.net
www.freshmeat.net
www.freesoft.org
osswin.sourceforge.net