[IP] more on Web ads threat to bank security

[David Farber <dave@farber.net>]

Begin forwarded message:

From: Rich Kulawiec <rsk@gsp.org>
Date: July 7, 2004 8:06:10 AM EDT
To: EEkid@aol.com
Cc: dave@farber.net
Subject: Re: [IP] : Web ads threat to bank security

> Security experts said updating virus software was the best protection.

But it's not.  Oh, not that it isn't a good idea for people who are
running operating systems which are susceptible to viruses, but like
most security problems, a multi-layered approach is more likely to work,
especially if one of the layers fails.

For example, in this case:

	- use a robust browser, such as Mozilla: never use IE
	- use a robust mail client, such as Thunderbird: never use Outlook
	- subscribe to the -announce list for that browser and
		get in the habit of downloading new versions whenever
		there's a major new release OR a significant security fix
	- disable pop-ups
	- restrict use of cookies
	- run a web proxy (I use Privoxy, www.privoxy.org) that adds
		another layer of defenses
	- run anti-adware software (because it will catch things that
		AV software won't)
	- if you insist on using a web browser to read your mail, then
		disable Javascript in it
	- (better) turn off HTML interpretation in mail
	- and so on.

Aside: it's fascinating how many of these articles say "email virus"
when the proper term is "Microsoft Outlook virus" and "web threat" when
the proper term is "Microsoft Internet Explorer security bug".

---Rsk

-------------------------------------
To manage your subscription, go to
 http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/