more on Web ads threat to bank security

[David Farber <dave () farber net>]

Begin forwarded message:

From: Rich Kulawiec <rsk () gsp org>
Date: July 7, 2004 8:06:10 AM EDT
To: EEkid () aol com
Cc: dave () farber net
Subject: Re: [IP] : Web ads threat to bank security

> Security experts said updating virus software was the best protection.

But it's not.  Oh, not that it isn't a good idea for people who are
running operating systems which are susceptible to viruses, but like
most security problems, a multi-layered approach is more likely to work,
especially if one of the layers fails.

For example, in this case:

        - use a robust browser, such as Mozilla: never use IE
        - use a robust mail client, such as Thunderbird: never use Outlook
        - subscribe to the -announce list for that browser and
                get in the habit of downloading new versions whenever
                there's a major new release OR a significant security fix
        - disable pop-ups
        - restrict use of cookies
        - run a web proxy (I use Privoxy, www.privoxy.org) that adds
                another layer of defenses
        - run anti-adware software (because it will catch things that
                AV software won't)
        - if you insist on using a web browser to read your mail, then
                disable Javascript in it
        - (better) turn off HTML interpretation in mail
        - and so on.

Aside: it's fascinating how many of these articles say "email virus"
when the proper term is "Microsoft Outlook virus" and "web threat" when
the proper term is "Microsoft Internet Explorer security bug".

---Rsk

-------------------------------------
You are subscribed as interesting-people () lists elistx com
To manage your subscription, go to
 http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/