Please wait...
HomeForumMembers LoungeGeneral TalkSecurity Sense
Topic Rating:

Jump to
ySense Customer Care CornerySense Knowledge CenterMembers LoungeYour StatsSuccess StoriesPayment ProofsMember IntroductionGeneral TalkForo en EspañolCharla GeneralSoporte General y PagosInternationalPortugueseItalianFrenchGermanHindiUrduFilipinoIndonesianArabicRomanianTurkishRussianBulgarianHungarianPolishEx-Yugoslavia
Security Sense

Locked

#1 by mostafa_raafat » Sun Nov 13, 2011 06:09

Hi,

How do you know if your privacy is being protected?

web site certificates :

if a website wants to be secured and uses encryption (secure sockets layer-or SSL), it needs to obtain a certificate :
Indications that your information will be encrypted include :
a closed padlock ( in web browser )
a URL that begins with "https:" rather than "http:"

:clixsense: ™ uses ssl certificate.

Privacy Policy :

every website privacy policy should state how the information you provide them will be used and whether or not the information will be distributed to other organizations.

Before submitting your personal information on a website, look for the site's privacy policy.

check :clixsense:About: Privacy Policy - ClixSense


Strong PassWords :

Code: Select All
Don't use passwords that are based on personal information that can be easily accessed or guessed.
Don't use words that can be found in any dictionary of any language.
Use both lowercase and capital letters, and a combination of letters, numbers, and special characters.
Use different passwords on different websites. and don't share it with other people

Password Recovery:

Secret Question : If you lose your password, you will be asked the question you select, to confirm your identity.
Secret Answer : Choose your answer as you would choose any password, you don't have to supply the actual information as your answer


Use FireWall and AntiVirus

Microsoft ™ Security Essentials
http://windows.microsoft.com/en-US/windows/products/security-essentials/download
Free,But Your PC must run genuine Windows to install Microsoft ™ Security Essentials.

Always Keep ALL Your Programs and Operating System Up-To-Date

Use a good web Browser like FIREFOX

Use your Administration Account as needed , then use another account while working with computer and internet

public networks : Never, under any circumstances, use a public network for financial transactions.


Email :

As Internet Industries Standard :
ALL legal and reputable companies will never ask you to reveal your password or your personal and financial details.

Split your emails :
use multiple addresses. As an example, use one for social activities, one for financial business and one for PTC.

Emails harvesters : use email pic instead of writing your email in websites or blogs, use a service as :
E-Mail Icon Generator

Malicious Links :
if you Do Not trust the link 100% Do Not click it , in emails - websites (including social websites like facebook....)
Don't follow links in spam messages,instead write url yourself or choose it from Bookmark Menu

Disable the automatic downloading of graphics in HTML mail , enable only for trusted emails.


hijacked email accounts could be used for :

send spam
a phony distress email scam that asks friends to wire funds to a foreign country
sending Malicious Links to hijacked email owner's friends, so it looks trustworthy => they click =>get hacked
.......
Last edited by mostafa_raafat » Fri Nov 18, 2011 04:39 » edited 1 time in total
mostafa_raafat
Posts318
Member Since22 Apr 2011
Last Visit5 Dec 2012
Likes Given30
Likes Received156/79

#2 by mostafa_raafat » Sun Nov 13, 2011 06:38

Example :
a phishing email address sent to me , addressed " remove limitation " from paypal
while paypal does not accept egypt till now

Code: Select All
PayPal
Dear PayPal account holder,

PayPal is constantly working to ensure security by regularly screening the accounts in our system. We have recently determined that different computers have tried logging into your PayPal account,and multiple password failures were present before the logons.

Until we can collect secure information, your access to sensitive account features will be limited. We would like to restore your access as soon as possible, and we apologize for the inconvenience.

Why is my account access limited?

Your account access has been limited for the following reason:

August 9, 2008: We have reasons to believe that your account has been accessed by a third party. Therefore, we have limited access to sensitive account features until identity confirmation. We understand that having limited access can be an inconvenience, but protecting your account is our primary concern.

(Your case ID for this reason is PP-654-62497-033.)

How can I restore my account access?

Please visit the Resolution Center and complete the "Steps to Remove Limitations." To visit the Resolution Center, please follow the link below:
Resolution Center
If you cannot access the Resolution Center, please use our secure server by following the link below:

Remove Limitation

NOTE: If you received this message in your SPAM / BULK
folder, that is because of the restrictions implemented by
your ISP or mail provider.

Thank you for using PayPal!
The PayPal Team
Please do not reply to this e-mail. Mail sent to this address cannot be answered. For assistance, log in to your PayPal account and choose the "Help" link in the footer of any page.

this email was sent by
support@paypal.inc.com via greedwngooty.com

when we check email header ( in gmail click " show original "), we find :
Code: Select All
Return-Path: <anonymous@greedwngooty.com>
Received: from greedwngooty.com (greedwngooty.com [168.143.49.30])
does not seems like paypal,right?

by checking the links inside the email , we find :
the links : Remove Limitation ,or Resolution Center, redirect to :
Code: Select All
http://168.143.49.19/confirm-paypal/

what do they want ?

Code: Select All
Please visit the Resolution Center and complete the "Steps to Remove Limitations." To visit the Resolution Center, please follow the link below:

no, not removing limitation , because i do not have paypal account as all egyptions, they only want financial details of paypal members , by going to a website with the same design of paypal and adding your financial details so they steal your money.

another thing , if any email assumes it is from a payment processor ,and says that you won $$$$, so follow the link to take the money , it is a spam , if click this link your payment processor account will be hacked.

so be carefull
mostafa_raafat
Posts318
Member Since22 Apr 2011
Last Visit5 Dec 2012
Likes Given30
Likes Received156/79

#3 by Maliky » Tue Dec 06, 2011 05:14

It is sensible to be security concious and to always be wary of "unsolicited" email. My logic tells me that it is unlikely that my email address has been randomly selected in some lottery, or that there is a parcel from some philanthropic benefactor waiting to be collected from somewhere, etc. etc. etc., particularly since I get so little response from advertising my ClixSense link on traffic exchanges. :?

My problem has always been with the advice that you use a different password for every site that you become a member of, simply because I always forget what password I have used on which site. :(

I tried using a password manager application but forgot the password that I created for that software. :lol:
Maliky
Posts149
Member Since20 Dec 2008
Last Visit2 Mar 2024
Likes Given449
Likes Received104/56

#4 by valerie » Tue Dec 06, 2011 08:46

Maliky, you so funny. :lol:
valerie
Posts23,155
Member Since27 Feb 2007
Last Visit16 Apr 2024
Likes Given5,904
Likes Received20,353/8,816

#5 by oberder » Wed Dec 07, 2011 12:02

Maliky wrote: My problem has always been with the advice that you use a different password for every site that you become a member of, simply because I always forget what password I have used on which site. :(

There's a few times I forgot my own passwords for a site I signed up too :oops: ( *Now where are those post-it pads...* )
oberder
Posts8,580
Member Since26 Jan 2009
Last Visit23 Dec 2016
Likes Given7,087
Likes Received4,679/2,614

#6 by mostafa_raafat » Wed Dec 28, 2011 02:55

Maliky

valerie

oberder

please, read this Announcement from :clixsense:

ClixSense Help Center

specially this part :
Code: Select All
........
We are asking that you please use caution in joining these sites and if you do join one please use a different usename and password than what you have here or at other PTC site you belong to. Some of these new startup PTC sites come online just to get your usernames and passwords for other sites.
.........
mostafa_raafat
Posts318
Member Since22 Apr 2011
Last Visit5 Dec 2012
Likes Given30
Likes Received156/79

#7 by Kreacher » Wed Dec 28, 2011 07:45

For myself, I keep a file of the passwords and login names for sites I use that require them. It is in a spreadsheet on my computer. I could probably place it on a flash drive or other such media, but just haven't.

For security, I use Spybot Search and Destroy (safer-networking) and antivirus programs (currently AVG and Avast freeware version). I also run Spyware Blaster (javacoolsoftware/spywareblaster). My router has a firewall as well.

With all of this, it is still possible to be invaded. Remember, all the locks on your home are useless if you let the thief in.
Last edited by buldan75 » Wed Dec 28, 2011 11:51 » edited 1 time in total
Reason: Type only names please. Thank you
Kreacher
Posts219
Member Since18 Jul 2009
Last Visit5 Jul 2017
Likes Given46
Likes Received78/59

#8 by mostafa_raafat » Thu Dec 29, 2011 09:33

Kreacher

i think it is better to print your password file and keep it in some safe place, not in pc

some times using anti-virus (paid or free) programs is not enough , because hackers encode viruses and make tests for all anti-viruses , to make sure it is undetectable by them "clean!!", until the anti-virus company discover the virus and create a definition for it , it might be too late

because if any one have a server in his computer ,the hacker will have access to his computer :

can see his desktop when he is online ( so the hacker can download any file , without any one notice)

can know what he types in his keyboard , even when he was offline ( the server will send all information to the hacker when he connects to internet )

& Phishing Attacks + Spam are other ways to steal passwords
mostafa_raafat
Posts318
Member Since22 Apr 2011
Last Visit5 Dec 2012
Likes Given30
Likes Received156/79

#9 by Maliky » Fri Jan 06, 2012 17:51

Kreacher wrote: For myself, I keep a file of the passwords and login names for sites I use that require them. It is in a spreadsheet on my computer. I could probably place it on a flash drive or other such media, but just haven't.

For security, I use Spybot Search and Destroy (safer-networking) and antivirus programs (currently AVG and Avast freeware version). I also run Spyware Blaster (javacoolsoftware/spywareblaster). My router has a firewall as well.

With all of this, it is still possible to be invaded. Remember, all the locks on your home are useless if you let the thief in.

Locks on your home are also useless when thieves work as a team to find other ways in, e.g. glass-cutters to get in through locked windows, climbing up onto the roof and removing tiles to get into the roof space, etc.

Unfortunately, the bad guys are always trying to come up with new ways of fleecing we honest folk.
Maliky
Posts149
Member Since20 Dec 2008
Last Visit2 Mar 2024
Likes Given449
Likes Received104/56

#10 by oberder » Sat Jan 07, 2012 02:14

Maliky wrote: Locks on your home are also useless when thieves work as a team to find other ways in, e.g. glass-cutters to get in through locked windows, climbing up onto the roof and removing tiles to get into the roof space, etc.

Guard the Tim Tams! ( *wave* Greetings Mailky :D )
oberder
Posts8,580
Member Since26 Jan 2009
Last Visit23 Dec 2016
Likes Given7,087
Likes Received4,679/2,614
Return to 'General Talk' Forum     Return to the forums index
All times displayed are PST - Server Time: Apr 18, 2024 19:52:07 PST