2008 Online Holiday Shopping Tips

Q:
As we all know, Christmas is right around the corner and I’m one who likes to start my shopping early. I’m planning on doing quite a bit of it online this year though and I was wondering if you could give me some safety tips. I haven’t done a lot of online shopping in the past, so I want to make sure I do it right. Thanks for any help you can give me!

A:
You’re absolutely right, Christmas is only 45 days away! That hardly seems like any time at all and just like every other year, I’m sure it will be here before we know it. So, when I saw this question in my e-mail the other day, I thought today would be the perfect time to answer it. I mean, it is the weekend and I’m guessing a lot of you will be doing some shopping over the next couple of days. I know I am. My goal is to beat the rush this year!

And if you’re anything like the person who asked today’s question, you’ll be doing it from the comfort of your computer chair. Yes, online shopping is a quick and easy way to get what you need for the holidays, but in doing that, you’re also taking a security risk. Don’t get me wrong, most companies have top notch security for their Web sites, but there are still some things you need to look out for. Don’t stress though! I’m here to help. Below, you will find the top five tips for safe online shopping. Read through them and then put them to practice. Here we go!

1.) Know Who You’re Dealing With - The first thing you need to be aware of is the merchant you are buying from. There are a lot of companies out there today that run completely off of their Web site, which means you probably won’t be as familiar with them as a store you could visit at the mall. In that case, you should take some time to learn about them and the reputation they hold. You can do that by searching them out on the Internet. Use a search engine to see if you can find any reviews about them from other consumers and try to find an information page on them. If previous shoppers really like or dislike a company, chances are, you’ll be able to find some comments about them somewhere on the Web. If you take the time to do this before you order from a new business, you’ll be much better off in the end.

2.) Protect Your Privacy - When you’re shopping online, you have to think about yourself first and that means doing whatever it takes to protect your privacy. Before you do any ordering, you should be aware of what information the merchant is asking of you, how it will be used and if they have any intention of sharing it with others. The best way to do all of that is to check out the company’s Web site. If they’re a legit site, they should have a Privacy Policy posted there. You should take the time to read through that and make sure you’re comfortable with everything they say. It’s a good idea to look for seals from privacy enforcement organizations, such as TRUSTe and BBBOnLine, as well. If you’re asked to enter in such things as your social security number or bank account information, do not do it! Those things are red flags and they are not needed to make an online purchase. If you pay close attention to what you’re doing, you will be just fine.

3.) Know All the Details - When you’re shopping online, you should always check out the complete details of your purchase. For example, make sure you know all about delivery dates, shipping and handling costs, warranties, return policies, etc. It’s also a good idea to get a company’s contact information before you finalize your order. They should have a telephone number or e-mail address on their Web site that you can keep on hand in case you have any questions or problems once you receive your items.

4.) Use a Credit Card - I know that may not sound like the safest thing to do, but it really is a good way to keep yourself safe. If you do business with a liable credit card company, they will protect you if anything happens while you’re making online purchases. Most credit card companies provide liability agreements, so if your card information is stolen, they will be able to put a hold on your card and issue you a brand new number. That way, whoever has your number is stopped from being able to use it. So, if you suspect any suspicious activity after you make an online purchase, call your credit card company right away and they’ll be able to handle everything for you. Also, when credit card companies see unusual activity on your card, they will inform you about it.

When you’re using your credit card online, make sure you look for the yellow padlock at the bottom of your Web browser or for the “https” in the URL. Those are two signs that a site is secure and that your credit card information will transmit safely. (You can read here for more on that). You should also always use strong passwords when you’re logging in to certain Web sites and make sure you don’t share them with anyone.

5.) Keep It On Record - The last thing you should always do is keep good records of your purchases. Make sure you either print out the receipt for your transactions or save it somewhere on your computer. Most companies send confirmation e-mails, so it’s a good idea to save that and print it out as well. In doing that, you will be able to keep better track of your total price, shipping and handling fees and shipping dates.

There you have it! Now, I know I mostly talked about online companies in this article, but these five tips go for every store you shop with online. It goes for all the “big box” stores, the department stores, grocery stores and so on. No matter where you’re doing your shopping, you need to be aware of your surroundings and make sure your number one priority is keeping yourself safe. Online shopping is even better when you’re smart about it. I now release you to start your Christmas shopping and I hope you find some great deals this weekend! : )

~ Erin

Author: Erin with WorldStart.com

EPIC: Use of Internet to deceive voters grows as election nears

As the election grows closer there are many internet tactics to deceive or misinform voters on elections rules. EPIC (Electronic Privacy Information Center), a Washington-based civil liberties advocacy group, released a report on Monday outlining these tactics. The goal of these tactics is to deceive voters and suppress voter participation in this general election.

Source: EPIC

Twitter and Plurk: What parents should know

This post has some great information for parents as it relates to children using these “microblogging” sites.

…”These sites aren’t nearly as popular with teens as MySpace and Facebook. Twitter says it’s only for people 18 and up — but it doesn’t ask your age when you set up an account. Plurk is aimed at people 13 and up.”

Source: Safekids.com

Microsoft Releases October Security Bulletin

added October 14, 2008 at 01:39pm

Microsoft has released updates to address vulnerabilities in Microsoft Windows, Internet Explorer, Host
Integration Server, and Office as part of the Microsoft Security Bulletin Summary for October 2008. These vulnerabilities may allow an attacker to execute arbitrary code, obtain sensitive information or operate with elevated privileges.

US-CERT encourages users and administrators to review the bulletins and follow best-practice security policies to determine which updates should be applied.

Source: produced by US-CERT

U.S. Presidential Election and Phishing Scams

U.S. Presidential Election and Phishing Scams

added September 10, 2008 at 09:18 am

Throughout the United States presidential election campaigns, US-CERT has received reports of phishing
scams and email attacks related to the upcoming election. US-CERT reminds users to remain cautious when receiving unsolicited email messages that are related to the presidential election and presidential candidates because the messages may be part of a phishing scam.

US-CERT encourages users to do the following to help mitigate the risks:

Source: US-CERT

Visa and Mastercard Fraud Investigation Scam

cvc2_mastercard.jpgcvv_visa.jpg

There is a scam that is surfacing in southwestern Indiana involving a phone scam. Though this scam has been around for a while it has recently surfaced in our area and I think it is important for everyone to be aware of this scam.

The caller claims to be from your Visa or Mastercard Fraud Department, advising you that your card has been flagged for an unusual purchase. After verifying that you did not make the purchase indicated, the fraudster tells you that a fraud investigation will be initiated on your behalf. Before hanging up, the caller will ask you to provide the 3-digit code on the back of your card. DO NOT PROVIDE THE NUMBER or any other account information to the caller. This is another scam to steal your credit/debit card information. If you receive this type of phone call, you may want to report it to local law enforcement authorities. If you are unsure about the call, hang up and contact your financial institution at a number or website you know is valid for the institution.

If our Visa Fraud Department calls you, they will NEVER request this 3-digit code, your expiration date, or your PIN number. (Remember: Visa already has this information so why would they ask?)

Visa* recommends the following tips to protect yourself from credit card phone scams:

  • When in doubt, ask for more information in writing about the organization calling or the offer being presented.
  • Never feel obligated to provide your credit card number over the phone.
  • Educate yourself about the cost of “900” number calls and how you can block such calls from getting through.
  • Get as many details as you can – for example, ask how much of your donation will go toward the charity as opposed to paying for administrative costs. The fewer questions the caller can answer, the less likely he or she is legitimate.
  • Get a call-back number, either so you can initiate the call yourself or because you may need to report it later.
  • Stay informed so you’re aware of the latest trends in telephone fraud.

Your best response:

  • If you get a call from someone posing as a representative from your financial institution and asking for your account or personal information, hang up immediately and call your bank to verify any claims.
  • If a telemarketer offers you a get-rich-quick opportunity, the best response is to turn him or her down right away.
  • Avoid offers informing you that you’ve won a prize. Respondents are often asked to pay for “shipping” or a “deposit” for a prize that never existed in the first place.
  • Be wary of calls soliciting contributions to charitable causes, particularly those regarding disaster relief. Many times, these solicitors are not legitimate. You’re better off choosing a worthy cause and contacting them yourself than responding to a random telefunding request.

*Source: visa.com

At Countrywide, One Overlooked PC Led to Loss of 2M Records

At Countrywide, One Overlooked PC Led to Loss of 2M Records: If your primary defense against portable storage devices is to seal up the USB ports on your users’ computers, you’d better be pretty darn good with a glue gun. That’s the message that’s emerged from court documents surrounding the recently revealed security breach at Countrywide Home Loans, where an employee siphoned off about 20,000 customer records a week for more than two years and sold them to a third party. [Date: 13 August 2008, Source: http://www.darkreading.com/document.asp?doc_id=161548&f_src=darkreading_section_296]

See also: http://www.darkreading.com/document.asp?doc_id=160767

Smishing (Cell Phone Scam)

A new scam involving cell phones has emerged. Identity thieves have long used “phishing” in e-mails to obtain personal and financial information from victims. This new scams involves SMS (Short Message Service) called “smishing”. A potential victim receives a text message to their cell phone posing as a financial institution stating that their account has been compromised and links them to a fraudulent website where the thief again try to gain access to the account numbers.

If you receive a phone call asking you to verify your personal information hang up immediately. Legitimate financial institutions will never do this.

If you did not initiate the contact hang up or delete the message immediately.

Report suspicious emails, text messages, or phone calls the to the Federal Trade Commission at www.ftc.gov or by calling 1-877-IDTHEFT

Fake Check Schemes

We continue to see an increase in cases of residents falling victim to check schemes. The most common is where the victim has advertised a product or service online or in a print publication and the schemer (”buyer”) will contact the victim and offer to purchase (or offer an “advance”)the product or service that is being advertised. The victim provides the schemer with their mailing address and a check is issued. The scheme usually involved the victim cashing the check at a bank and sending “shipping & handling” or other costs to an address via western union. When the bank cashes the check and the victim has already sent the money to the schemer. When the bank cannot collect the funds and determines the check is fake the victim now becomes responsible for the full amount of the check that was issued and now has fallen victim in the thousands of dollars. Since the scam has surfaced a lot of banks are more alert and able to detect the check is fake before it is even cashed.

Remember if it sounds too good to be true that is usually the case. Some important things to remember:

-the “buyer” requests the money be sent to another country or the “buyer” is from another country

-”buyer” requests the money wired after you have deposited the check

-there is no legitimate reason for the”buyer” who is giving you money to request money to be wired back.

Resource: http://www.fraud.org?ref=cybercrime.gibsoncountysheriff.com

What is computer forensics??

Computer forensics (also known as digital forensics) is the practice of identifying, seizing, analyzing, and reporting computer/digital evidence including, but not limited to hard drives, removable storage devices and media, PDAs, cell phones, etc. The process follows stringent protocol to adhere to the evidentiary rule in a court of law.

Reference: http://en.wikipedia.org/wiki/Computer_forensics