Showing posts with label phishing. Show all posts
Showing posts with label phishing. Show all posts

Sunday, September 11, 2022

Trust a Website?

 When you decided to sign up for a new website, did you somehow have trust in it before you even joined it? Your buddies were there. So it must be okay. Maybe it was YouTube or Spacedout.url or Tweeter.org or PeanutButter.com etc. But as you sign up, they ask for an email address, which you go ahead and give yours to that new website. So let's say your regular personal email is - billAdams2@gmail.com - and you have the expectation that they will send you messages to your email address. The first one you will get is always a 'welcome' message. So you're in.

Not quite, as soon as you type in your email URL, they ask you for a password. So you expect to make up one that will be your password to the site you are joining. So you think of one, like maybe Bill2guy, and suggest it.

But wait, now they say the email and password are not correct. What? The screen blinks with fake honesty waiting for you to try again. Try again.

Now you realize the email you use for your private email communication is the one they want, your PASSWORD and all. But how did they know your password to your personal email was incorrect if they didn't try using it? So you try another random password and type that one. Nope, they want you to put in your PRIVATE email password which is all they will accept. 

So the site you are trying to join, now has info that may be incriminating, or embarrassing and PRIVATE to you and your family. At least not for vicarious viewing. WTF? All your friends who send you greetings or info about your job, church, neighbors, relationships, funny jokes, political comments etc are now compromised by a new site you know nothing about. And the email addresses of all those friends and associates are in YOUR email folder. Anyone associated with that new site who now has access can READ YOUR EMAILS from everywhere and anyone and can do what they will with them.  Of course you are using the standard answer - 'but I'm not doing anything wrong.'  Does that mean you believe it is okay for strangers to see and record you communications? But you trust Tony Soprano don't you?

 

While the web is full of warnings about email phishing and hacking you just violated the first rule of web safety: DO NOT GIVE ANYONE YOUR PASSWORD! Ever.

You trust their technology not to tell on you? That's feeble. Oh they wouldn't do anything bad. That's idiocy. Google owns Blogger and gmail, they are famous, (notorious) for tracking you, mostly all of them do. Big money in selling info. Don't trust them!

You trust the 'Cloud' too? Sure, and if that website goes down so does your information!  How many times have you read about the Cloud being compromised? How many Clouds have been compromised that they don't tell you about? Your info is secure 'in the Cloud'. Sure it is because someone wrote that in the sign-up page. lol

I joined a website once where you could express opinions about certain events. Yes, gave them an email address (only used for signing up to websites) And I posted an item which expressed an opinion (politely) about a certain event, but the administrators didn't like it. And kicked me off! But they still have my email and password! See, in spite of the warnings we are so desperate to join something we willingly give up our privacy! And we can't make them erase it forget it, unsee it, or not USE it.

You can get a separate hard drive, not too expensive, (I paid $74 for 1 Terrabyte USB drive!) to attach and ONLY plug it in when you want to save something and NOT leave it lingering tantalizingly on your main computer. Copy and unplug.

So here is what I do; Set up a NEW email with whomever, one that you will NEVER use for personal messaging from your friends or anyone else! Use it to ONLY sign up to any new site, and give them that password!  Not the best but at least you haven't given them a fun afternoon of browsing through your most intimate online communications. Let them get their vicarious thrills from elsewhere! 

I know, I know, your IP address on your specific computer is out there first, and anyone can see where you are by Geolocation co-ordinates and unless you're using Tor and a VPN it isn't hidden.  But that's for another time, at least here's a start.


And if you're using social media sites and chattering about your life ... well you're on your own.