Welcome to Gaia! :: View User's Journal | Gaia Journals

 
 

View User's Journal

Report This Entry Subscribe to this Journal
The Tides of Xya Miscellanious Adventures


Xya
Community Member
avatar
0 comments
The big "S" word. The myths of Security.
So I wanted to talk to you about the big "s" word.

Security.

Internet security, to be more precise. Not just Gaia, but everywhere.

As the internet gets older, people find more inventive ways to cause trouble. Sometimes these people do it on purpose, while other have a reason to do these things that are less than admirable than just making an account owner miserable. There is also the fact that sound internet security protocols is not one of those things that are widely practiced. Some may not even take it that seriously, which is why I would like to put this information forward.

In my position as an Omni Moderator, I've heard a lot of stories. An account hacking, let it be Gaia or something else, is very rarely one of things that happen out of the blue. Sure, they happen, but usually there is more of a reason for it. Mostly these are the private schemes of those who do the hacking. "Because I can" is one of those answers that is common. Other times it can be to reach goals that they cannot otherwise reach. Not that this excuses anyone from what they do in order to commit any sort of account hackings, but it's beneficial to keep in mind that, if it happens to you, it's not because of magic.

Pretty much, hackings happen because there is a moment where someone lets their guard down and someone else takes advantage of it. With social networking and more people using the internet gets more common, it's a good idea to take those precautions which can help you stay one step ahead.



THE MYTHS
Yeah, there are a ton of them. I am going through the most common ones.


Myth 1: "My Password is strong enough to keep me safe!"
Passwords are keys to just about everything on the internet that you want to keep safe and secure. But, let's face it- in this day and age there are flaws in this belief. People tend to use easy things to guess, such as a birthday, their name, their place of residence, common phrases and words. Just tossing some numbers on the end doesn't cut it any more. More care has to be taken since there are chances that a password will not be enough to save you in the event something catastrophic happens and you are targeted.


Myth 2: "My password is ENOUGH to keep me safe."
Yes, I am stressing this one again. So the question is: Are you changing it often? If the answer is "No" then your password is not enough. I've been involved with conversations where someone has accidentally slipped their password to something. Needless to say, their chances of getting an account hacked has just gone up. If something like that happens then you need to immediately, at your first convenience, change the password to that account. For the life of me, I can't remember what they said because I have the memory of a goldfish. This doesn't mean that someone else is way more advanced than what I am and can use this information against that person.


Myth 3: "Seriously, it's enough. It's so secure I use it for everything."
Yeah, not a good idea... If someone knows that you have a Gaia account, a credit card account, a Netflix account, Deviant Art account, etc etc, under the same username? Well, you just tied the bow on the goodie bag and you might as well make them a sandwich to go. It's better to use different passwords for everything. This way you are covered in the event that something happens and someone is smart enough to check other places where you could have valuables. You never know- someone might steal your credit card account, but a Gaia account might be icing on the cake.


Myth 4: "I can trust my friends. They would never do something with my stuff."
Don't put your money on this. Ever. Hell hath no fury like an ex-friend scorned that knows your password. Or a family member, even. Don't share that with anyone. It's not a good idea to tempt the beast only to get bitten. The possible exception to this is a parent or guardian. Otherwise don't share with anyone. It can lead to more problems down the road than someone being sore that you didn't allow them into your account.


Myth 5: "But this >insertsomesortofauthorityfigurehere< wants my password!"
There is not one place I can personally think of where any sort of administrator, moderator, developer, accountant, police officer, teacher, or government official would need your password and asks you through really casual means, like via IM, instant messages or through emails. Seriously, if a government official or law enforcement officer needs it, either it will be face-to-face or they will take your whole computer. Otherwise, most places function where everything works on the back end where stuff can be accessed by Staff without necessity to see it from the user-facing side. Yeah, if someone is claiming they need it, they are lying. Report the message and block the person.


Myth 6: "This download seems SO COOL!!! I can cheat and get lots of this game's stuff!"
Yeah, lots of issues with this one. First of all, check the Terms of Service of that game. I betchya that they prohibit the use of anything automated or cheats. That's your first clue that it shouldn't smell right. The second thing is the fact that, if this is so super-uber secret and so powerful, why would they give it to you? "Well, they said I won/deserve/got randomly chosen for it." No. That's not how this works. Those usually have malicious data in them that can mess with your computer and really make you miserable. Keyloggers, viruses and all sorts of malware might be in there. Don't download it, no matter how enticing it is.


Myth 7: "OMG I CAN DOWNLOAD MY FAVORITE MOVIE/SONG/BOOTLEG PROGRAM WITHOUT PAYING FOR IT!"
NO. See above. Not only is it more legal but it's safer to buy it through the appropriate routes. Make sure that the source is legit, too.


Myth 8: "But they are asking me to fill out a survey. It should be safe."
Check with someone who is familiar with the place you are in. Typically there are customer service reps, moderators or even a questions&answers forum where you can get the information on what they sent you.
Rule #1: If it asks for your password? Stop. Do a 180, report the person for sending it, block them. This is another means of getting you to hand over your password.
Rule #2: They are offering a super-cool prize, you say? Double-check that the offer is legit. Chances are, it's not, especially if it doesn't come from an official of the website. Make sure that it's customary that messages are sent through non-player character accounts that have these uber-awesome, super-cool things in them.


Myth 9: "But they need my password in a pop-up. Or in this form. Or in this message. Or this obscure webpage because it says I logged out."
Are you sure? Go back to the main page of the site. I betchya anything that you are still logged in. If you are not, well, sometimes accounts are auto-logged out after so much time. Go back to the main login window that is on the site itself to make sure that you are inputting your password in something that is legit and not a trick. If you have a bunch of people telling you "no" and only one person saying that it's okay... Take the hint and don't touch it.


Myth 10:"My account will be safe if I don't ever use it because my password is AWESOME."
The fallacy here lies in the fact that, if you are not logging in, you can't make sure it's safe. If you really care about an account of any sort then I would advise logging into it. This also applies to the huge amount of emails that some people have. For many sites, having access to the email is important for special communication from the site and password recovery if you forget your password, so don't forget these, too. This means changing your password every so often, even your security questions if they are available, to stay one step ahead of people who might want to get into your account. Sometimes leaving an account for too long will snap down extra protection by the site that owns the account. This is where your accounts can get so secure that not even YOU can get into them.


Myth 11: "I have everything saved in an ultra-discrete location!"
um... This isn't a word processor file on your computer or written in your diary where a sibling can find it, right? If so you might want to reconsider where it is and look for a different place to hide all of your passwords.


Myth 12: "I download a lot of stuff all the time and I never get caught by viruses. I don't need to check stuff. It's absolutely unnecessary and takes too long."
No, it's not an arbitrary thing. You need to keep an eye on how safe your computer is- it's part of internet security. Not everyone has a system that is impenetrable, even if they believe it is. Overconfidence can get the better of someone who believes that their system will never be tapped.


Myth 14: "This person is asking me a lot of questions and must want to be my friend! There should be no harm in this."
Sure... Just remember how some account security measures work. They ask for things like your pet's name, your mother's maiden name, your birthday, where you met your husband... REALLY specific questions. Or they ask you to do silly stuff, like give you a link to something. If it sounds like someone is gilling you to pry answers then trust your instincts, stop talking to them, report them and block them. If they can't get this information themselves then don't hand it over.



Myth 14: "I AM INVINCIBLE!"
... ._.;; I think you may want to go back and re-read...



There are more and if I can remember any more I will make sure to come back to this and update. The biggest thing here to remember is that you are not invincible. It can be the smallest thing that can put your account at stake. It's best to be on your guard- knowledge is your best defense, and knowing how to use the security tools that a site can provide.

Take the time to learn the security measures of the website you use to use them to your fullest advantage. Yes, it's unfortunate that you can't protect yourself fully from hacking situation completely where your computer and all your accounts are fortresses, but you can make it a pain in the butt for these people so they leave you alone.




For the record, I want to share this with you:
I would recommend a password that is not easily guessed, like something with a pet's name and your birthday. This is a good recommended method on how to choose passwords:
~ Look around the room for 3 random objects- the more obscure, the better
~ Capitalize in random areas; Gaia passwords are case-sensitive
~ Random characters, such as #, &, ! or ? are good to use
~ 4 random numbers are good to add

Password strength is a big deal here; I would recommend this process in choosing a password:
priNterChri@StmasMug4390
43priNterChri@StmasMug90
priNterChri43@90StmasMug
priNter3Chri4@0StmasMug9

(Remember, do not use these! they are public, which means anyone can try them.)




Leave a comment if you have something for a later addition! :3

~ Xya




 
 
Manage Your Items
Other Stuff
Get GCash
Offers
Get Items
More Items
Where Everyone Hangs Out
Other Community Areas
Virtual Spaces
Fun Stuff
Gaia's Games
Mini-Games
Play with GCash
Play with Platinum