Showing posts with label PRIVACY/ANONYMITY. Show all posts
Showing posts with label PRIVACY/ANONYMITY. Show all posts

Monday, May 23, 2011

How to share safely on Social Networks such as Facebook

From the Editors of our content partner: Every Day Connected

The days when social networks were just for teens are long over: Adults now take up social networking for fun and business alike. One entrepreneur, Sheilah Etheridge of Anchorage, Alaska, uses social networks to turn up business leads for her home-based accounting and consulting firm. But Etheridge is selective with what she shares and where. “Everything we post on the Web is obviously out there for all the world to see, and it’s out there for eternity,” she says.

To get the most out of your favorite social networks, it’s important to be aware of how to protect your online privacy. Here’s how to share safely:

Tip No. 1: Don’t fork over too much personal info.
You don’t always know who is viewing even tidbits of your profiles, so think twice before you post sensitive -- or potentially embarrassing -- information, videos or photos on social networks. It could fall into the hands of identity thieves, prospective employers, college recruiters or even potential mates.
“People should assume the content they put online is going to be public,” says blogger Jeremiah Owyang, a former senior analyst for Forrester Research.

Tip No. 1: Review privacy policies before you post.
Some networks, such as LinkedIn, have adopted privacy policies that vouch they’ll never share your information with other users without your consent. Other sites, like Facebook and Twitter, offer online privacy settings that allow you to control who can view certain information and who gets notification when you add friends or Web applications.
But be mindful about the details: On Facebook, for example, your profile and photo privacy settings are separate. Just because you block non-friends from seeing your profile doesn’t bar them from seeing your photos. Make sure your review all your preferences under Account and Privacy Settings.

Tip No. 2: Don’t reveal every step you take.
It’s a freaky thought, but stalkers, jealous spouses and suspicious employers can use social networks to keep an eye on your every move. Many photos and posts are time-stamped, so the date and time you post it is recorded and shared with your network of friends or connections. This means your boss may be able to find out how much time you spend on Facebook while at work.

Facebook also allows you to “Check In” where you are, revealing your geographic location. On Twitter, you can note your location in your tweets and in your profile. If you want to keep your moves and location on the down-low, avoid checking in altogether and tweak your online privacy settings.

Tip No. 4: Be smart with apps.

Most social networking sites are for-profit companies, and advertising keeps membership free. Any time you sign up for a free app or contest on a social network, your private data might be used to target you with online advertising based on your activities.
“The purpose behind social networking sites is supposed to be to enable you to connect with friends and colleagues and do these networking activities,” says John Verdi, senior counsel for the Electronic Privacy Information Center (EPIC) , a nonprofit privacy advocacy group in Washington, D.C. “What they don’t say is that ‘our real purpose is to mine your data and sell it to the highest bidder.’”
So even if you’ve read Facebook’s online privacy policy, you still need to read the privacy policies of application-makers who promote their apps on Facebook. “They are third-party applications,” says Verdi. “The social networks don’t vouch for any of them.”

Tip No. 5: Don’t expect to be able to delete it once you post it.
It’s happened to the best of us: being haunted by your old social network posts that never die. There is an assumption that you “own” your profiles. But that’s not the case.
In the past, Facebook users were not able to completely delete their profiles. Facebook claimed it wanted to store the information in case users wanted to revive their profile, but it has now caved in under pressure from users to allow for easier deleting. MySpace and LinkedIn allow users to delete their profiles too.
But when it comes to posts you leave on others’ profiles -- or content that friends copied off your profile or blog -- it can remain online for eternity. “There are going to be remnants or ghosts,” says Owyang. “Assume that everything you put online is forever.”
The single best thing you can do before you put yourself out there on a social network? “Speak to other users you know and trust before joining some sites,” says Etheridge. In other words, network a bit before you sign up for a network so you can learn more about how the site protects your info -- or doesn’t.

Sunday, June 08, 2008

Prevent Cross-Site Scripting (XSS) and browser security vulnerabilities

The famous and highly useful NoScript add on has been around for a while. This open source add on has been evolving so much and now it is compatible with Firefox 3.1a1pre (Minefield) along with other features such as Faster Base64 injection checks in Anti-XSS filters, Improved IP based shorthands and Enhanced cross-site POST blocking as an anti-CSRF mitigation.

For those who are not yet aware of what Noscript is:

It is no secret that Firefox is the top dowloaded browser in the world and one of the main reasons for this can be attributed to the add ons feature it provides. There are plenty of them out their to suit the various needs of the users right from file sharing to video downlods.

Apart from this it is also the most safest web browser. But can it be more safer?
Well, as most of you know the best way to visit any site that you are unfamiliar with is to turn off the javascripts, flash plugins, cookies etc etc. So obviously a safe browser can even be more safer with these things turned off. And that is where the NoScript add on comes in.

The NoScript Firefox extension provides extra protection for Firefox, Flock, Seamonkey and others mozilla-based browsers: this free, open source add-on allows JavaScript, Java, Flash and other plugins to be executed only by trusted web sites of your choice.

One of the major feature of this add on is that it provides protection to the infamous Cross-Site Scripting (XSS) vulnerabilities. This sort of vulnerability is highly used by the hackers to steal passwords of the users.

Already there have been many incidents where this vulnerability was used to steal Myspace passwords and online banking passwords. As a person who has written and read a lot about how many browsers were compromised to steal the identity and user authentication using this vulnerability am glad that NoScript has put special attention to this.

Cross-Site Scripting (XSS) vulnerabilities are usually programming errors made by web developers, which allow an attacker to inject his own malicious code from a certain site into a different site. This usually happens when you have a website open in your browser and open another page which executes the vulnerability. Many famous browsers such as even Firefox had this issue before they came up with ant-phishing techniques. But still even the white listed sites are prone to this attacks and NoScript has taken special care to tackle this with its Anti-XSS counter-measures.

One of the best features of NoScript is that it has an unique whitelist based pre-emptive script blocking technique which prevents exploitation of known and unknown vulnerabilities.

When I checked today the No Script website is at 4 among the movers and shakers section list. It is clearly a hit among users especially the ones who are into online transactions.

Related links:
Some people have problems with setting up this add on to its full potential. If you are one of those go here

About Cross-Site Scripting (XSS) and the Anti-XSS feature.

NoScript home page







Friday, June 06, 2008

Some popular and very useful Firefox Add ons


Below is a collection of Firefox add ons/ extensions and they are listed here because of its popularity and the value of the comments from its users. All the add ons listed below are very popular and has racked in some very valuable comments from its users. Hence am sharing it here. Any add ons which have a huge weekly download and is popular , yet have negative feedbacks from its users are not listed here. So enjoy!

DOWNLOAD AND UPLOAD RELATED


Rapidshare HappyChecker
As everyone knows a non premium Rapidshare user has to go through the time wait and then has to fill in the Rapidshare captcha. But rapidshare for its non premium users has come up with the happy hours to give the Rapidshare non premium user some relief. This is a very popular Rapidshare happy hours notifier which notifies the user when Rapidshare Happy Hours are active.


DownThemAll! 1.0.1
DownThemAll is a very useful and popular download manager. It claims to have an advanced accelerator that increases speed up to 400% and it allows you to pause and resume downloads at any time. Users say it is fast, reliable and easy-to-use! It lets you download all the links or images contained in a webpage and much more. Also you can refine your downloads by fully customizable criteria to get only what you really want.

Firefox Universal Uploader
This firefox extension allows you to upload/download files from any website using a friendly interface. Upload files/photos/videos to Flickr, Picasa, Youtube, Box.net(1GB of free space), Facebook, Webshots and OmniDrive in this version. Next versions would support other websites like Google Videos etc. You can add multiple files to the queue at a time. Extension will take care of uploading them for you.


TORRENT RELATED


FoxTorrent 1.13
This is a BitTorrent client integrated into Firefox. Allows you to stream videos as they download and supports Windows, Mac, and Linux. This popular add on has 8,887 weekly downloads
.

Torrent Finder Toolbar
Torrent Finder Toolbar is a torrent search toolbar for Firefox, which enables users to search over 180 top torrent sites and trackers from their Firefox browser. This is a great torrent finder and no longer one has to go to individual sites to search for the torrent files.

MUSIC AND VIDEO RELATED


FoxyTunes 2.9.5
FoxyTunes lets you control almost any media player and find lyrics, covers, videos, bios and much more with a click right from your browse
Not compatible with Firefox 3. But this is very popular and has earned some great reviews by its users.

Video DownloadHelper 3.0.4
DownloadHelper is a tool for web content extraction. Its purpose is to capture not only videos but image files from many sites directly on your file system. It also works with MySpace, Google videos, DailyMotion, Porkolt, iFilm, DreamHost and others. This is very popular and has earned some great reviews.


There are some other video download add ons at the Firefox Add on website but the other very popular ones I had a look at had some bad reviews including one of them being detected as spyware by Avira Anti-Virus


Note: You can just use the free VideoLAN player to view .flv videos.

BLOG RELATED

BlogRovr 1.1.779
RovR fetches posts from your favorite blogs about anything you're browsing, and shows you summaries you can open read posts without leaving the web page you were on. Has got some great reviews.

Sage-Too 0.9.1 RSS Feeds etc.
Sage-Too is a lightweight RSS and Atom feed aggregator extension for Mozilla Firefox. Features include:
Reads RSS (2.0, 1.0, 0.9x) and Atom feeds, Feed Discovery, Integrates with Firefox's bookmark storage and Live Bookmarks, Imports and exports OPML feed lists, Newspaper feed rendering customizable via style sheets, Technorati and RSS search engine integration, Support for the following locales: Argentine Spanish, Catalan, Chinese, Czech, Danish, Dutch, Finnish, French, German, Greek, Hungarian, Italian, Japanese, Korean, Polish, Portuguese, Russian, Serbian, Slovenian, Spanish, and Swedish This is highly popular with very positive reviews.

DashBlog 1.5
DashBlog lets you quickly collect videos, images, text/quotes, songs and screen-captures from any web page and publish them to your blog (word press, blogger/blogspot, tumblr) and/or twitter.It’s the fastest and easiest way for you post video, text, quotes, images and songs to your blog, tumblr and twitter (all at the same time). This is very popular among bloggers and has a high reputation among its users.

SECURITY/ ANONYMITY RELATED


Netcraft Toolbar 1.2
Blocks phishing sites, helping to protect users from online fraud. This toolbar is only for Firefox 2.0 or later. For earlier versions of Firefox, please download the toolbar direct from http://toolbar.netcraft.com/install


ProxySel 1.3.08a import export proxies
The Proxy selection and processing utility is a Mozilla extension that let you select a proxy from a drop down menu. You may import proxy lists in different formats. This has a Menu to add proxy manually and a Auto Tor, Privoxy detection feature. But some users are facing problems with TOR in the latest version of this.


Tor-Proxy.NET Toolbar 0.3

With this toolbar you can access TOR-Proxy.NET directly.This Addon creates a new toolbar, where you can enter the address you want to take a look at. You also can choose between different anonymization-networks. There are not much reviews on this even if it is popular. So it would be advisable to wait for some more reviews.


Torbutton 1.0.4.01
Torbutton provides a button to easily enable or disable the browser's use of Tor. This has earned some great reviews.


SwitchProxy Tool 1.4.1
SwitchProxy lets you manage and switch between multiple proxy configurations quickly and easily. You can also use it as an anonymizer. BUt this does not work with Firefox 3.


FoxyProxy 2.7.4
FoxyProxy is an advanced proxy management tool that completely replaces Firefox's limited proxying capabilities. It offers more features than SwitchProxy, ProxyButton, QuickProxy, xyzproxy, ProxyTex, TorButton, etc.


OTHERS
CustomizeGoogle 0.72
CustomizeGoogle is a Firefox extension that enhance Google search results by adding extra information (like links to Yahoo, Ask.com, MSN etc) and removing unwanted information (like ads and spam). All features are optional and easily configured.


Yapta 1.3.0.9 for Ticket Fares
An user review sums up this add on very well: "For the frequent traveler, this add-on by Yapta is essential. Every time you're looking at flights it just shows up and allows you to tag/watch those specific flights, thus avoiding (a) a separate trip to the Yapta site to utilize their very unique service, (b) having to go back again and again to the flight listings and check it. They notify you. You know how some add-ons are kind of complicated and you're not really sure how to use them? Nothing overdone on this add-on. It's simple, it works, and it saves you time. Plus it's not intrusive to your browsing experience. I did find a couple small issues, but no show-stoppers and the folks at Yapta have been responsive. Probably already fixed."
But..even if this is very popular with 6,077 weekly downloads, it has only two reviews so far.

Shareaholic 1.4
Shareaholic allows you to share, bookmark, and e-mail web pages quickly via a wide array of web 2.0 social websites without cluttering up your browser. This add on is hugely popular and is even recommended by Mozilla/ Firefox.


Note:
I have listed the add ons here which I felt are fine to use, after reading the reviews. Like I mentioned above all the add ons listed below are very popular and has racked in some very valuable comments from its users. Hence am sharing it here. Any add ons which have a huge weekly download and is popular but yet has very feedbacks from its users are not listed here.
But it does not necessarily mean that I am right. Its just my belief and it does not mean that readers have to cater to that. All the extensions/ add ons listed above are submitted to the Firefox Addons website by individual developers and it does not necessarily mean that all of them are safe to use or not safe to use. So it is always advisable to read reviews about them before using them and its entirely upto the readers' discretion as to whether to use them or not after reading the reviews carefully. Its always great to use your logic and analytical skills before using them. Each individual add on has a longer description at the Firefox site and user reviews along with the developers' remarks. So choose wisely.

Google