Social Networking Security
Internet security is a hot topic these days, especially with identity theft and malware sites affecting the realm of Social Networks. For those not familiar with Social Networking, it is a service focused on building online communities of people who share interests and/or activities, or who are interested in exploring the interests and activities of others. Most social network services are web based and provide a variety of ways for users to interact, such as e-mail and instant messaging services. The most popular examples are Facebook and MySpace.
This month, to help give you some peace of mind, we’re talking about Social Networking security. The focus is on some of the common scams and issues, with some tips to help you protect yourself and your family.
Spam
As with most forms of online communication the spammers always seem to find a way to abuse the system. Social Networks, unfortunately, are no different. There are reports of an increase in Social Network spamming with individuals and organisations using Social Networks to post their links and messages where they're not wanted.
If you are receiving spam messages from an individuals account or from an organisation, the best course of action is to not reply and report the offender and let the websites administrator handle it.
Shortened URLs
Shortening URLs is another ploy being used by online scammers to trick unsuspecting Internet users into downloading malware. Malware involves disguising links so they look harmless, but instead the actual link takes the user to a malicious site or starts the download of malicious software. In some instances, scammers have used hacked accounts to send shortened links to supposed videos of themselves. The unsuspecting person is then misdirected to download a video upgrade, which is in fact password stealing malware.
There are some easy ways to counteract this. If you use the Firefox browser there is an add-on – LongURL – which allows the user to expand the URL and determine where it actually goes. For the IE faithful you’ll need to visit LongURL’s website and save their 'bookmarklet' that will allow you to check links.
Hacked Accounts
By now we’ve all received one of those emails from Nigerian bankers wanting to share millions of 'lost' dollars. Today's scammers however have found another way to target the average Joe – Social Networks. A rise in the number of hacked or false Social Network accounts has led to an increase in false requests for money. Yes, they are now pretending to be your friend or using an account hijacked from a real friend of yours, in a desperate situation and in need of a quick loan.
The advice from the majority of sites is to report the hacked account. Our advice – when in doubt, call or contact your friend using alternative means to verify their situation before sending money.
Frenemies
As much as we hate to use a word popularised by Sex and The City, when it comes to Social Networks it's quite appropriate. We're referring here to persons added to ones Social Network page or profile that are not part of our actual 'social network'. This poses some obvious and not so obvious security issues.
Firstly there is the danger of online predators using false accounts to target younger users. There are unfortunate reports of this happening, with results we would rather not go into detail about.
There is also the risk of opening oneself to criminal activities like theft or burglary. While it seems a remote risk, it is very real. Ever sent out an invite for a party on Facebook? It's this kind of invitation, excuse the pun, which criminals are waiting for. First they befriend you, then collect your personal details and wait for the next time you mention your 'exciting' holiday plans. Then just like that they have the perfect opportunity to pay you an unwanted visit.
Before you commit 'Facebook suicide' or cancel all your accounts, here are a few tips for you and your family.
- Stranger danger – don't accept a friend request from anyone you don't know or are familiar with. It's a very obvious point but one that often people don't adhere to. Here's a simple rule of thumb, if you don't trust them enough to give them your phone number or email address, don’t accept them as a friend. It may be fun connecting with people all over the world or getting your Facebook friend count to clock over another hundred, but you never know who's on the other end. Parents, educating your children about the dangers of Social Networks is important, just like the stranger danger warning.
- Don’t post personal details – another obvious point, but some users are a little too social and oblivious to the consequences, like this guy's wife. Keep in mind details like date of birth, phone numbers, email address and other details can be used to create false accounts in your name or even hack your account.
- Verify friend requests – it's a conservative approach but wouldn't you rather be safe than sorry. Whenever you receive a friend request, respond with a message to verify that the friend request is actually from the person sending it. Perhaps ask them a personal question, something only they would know.
- Private posts – refers to the 'private' feature most Social Networks have available to restrict who sees your post or pictures. This is a great feature to save you from unwanted criminal attention, like when sending party invites.
- Report suspicious or inappropriate users – most Social Network sites have reporting mechanisms available.
- Check your privacy settings to make sure that your profile is only visible to your friends and not the whole world.
Online 'Cyber' Bullying
Online bullying is a concern, especially for parents, in today's digital society and a common problem with teenagers and children doing much of their social interaction online. Whilst it's hard for parents to monitor their child's online activity it is important that parents at least educate themselves on what Social Networking sites are about. The recurring theme amongst Internet literature is communication: talk to your children about their online activities. The Federal Governments Cyber Smart website has some valuable information on how to guide your children through the online world. Social Networking sites Facebook and MySpace also have some information available on their sites. For a quick synopsis we've summarised the main tips below:
- Think before you post – everyone can see what you post on Social Network sites, help them understand the implications of this. That photo your child posts may have been funny at the time, but could embarrass them in the long run.
- Limited friends list – there are always 'mean spirited' people out there, warn your children about accepting 'friends' they would not otherwise socialise with. Facebook takes this process one step further by allowing users to create Limited Profile lists. These lists allow the user to select specific friends and specify what they can see, such as photos or event invites. MySpace similarly allows users to create friend categories in the Friends Space box.
- Blocking or removing friends – a last resort but if the need arises all sites give the user the ability to remove a friend from their profile. Facebook to another extent gives the user the ability to block someone so they cannot see their page, plus the blocked user is not notified.
- Report inappropriate users – as we touched on before most Social Network sites have reporting mechanisms available. In the case of online bullying it's important to talk to your children about the topic. They probably won't want to report it but at least they are aware of it and the remedy should any issues arise, especially in cases like this.
That concludes this month's Hot Tip. Hopefully we have not scared you away from Social Network sites because when used sensibly, they are an invaluable and fun means of staying in touch with friends and family.
The views in this newsletter are those of the author and not necessarily those of Amnet or their affiliates.
|
