The internet, computers and mobile phones are some of the greatest technological achievements of humanity. With all the advantages that these achievements bring us, many problems have arisen for online security. In recent years, there seems to have been an exponential increase in cases of hacking into privacy.
The BBC reports that Facebook broke privacy laws in Canada this month. The UK government has been caught up in an email privacy scandal and health apps are posing an “unprecedented” risk to privacy. New checks are being required of UK users in order to obtain a kind of porn passport that would allow them to access websites with such content. The EU has approved a new copyright directive, which has strict rules on copyright infringement.
In terms of hacking and malware, 2017 saw WannaCry, Petya and NotPetya infect large organisations such as the NHS. A year earlier, a botnet of 1.5 million bodycams was created due to inadequate security.
Malware has become an increasingly worrisome threat to Android as well. The Judy malware affected an estimated 36.5 million Android devices, infected via 41 apps found in the Google Play Store.
So, with all the freedoms the internet has brought us, it has also become quite scary. What can you do to maintain your privacy and avoid malware or malicious hacking attempts?
Secure router
A few years ago, it was common for routers to be hacked, many of which had default factory passwords that people often didn't change. Recently, a growing number of security-focused routers have emerged, such as the F-Secure SENSE, which has automatic updates and scans your network traffic, including IoT, for suspicious activity.
TP-Link has invested in antivirus from Trend Micro allowing it to address problems at their source.
The more adventurous can use software like PiHole to block ads on all devices in your home, which will reduce your privacy concerns.
VPN
Virtual private networks have exploded in popularity in recent years. They work by rerouting your internet traffic through another computer that masks your identity. This bypasses age checks and often allows you to choose where your IP is located, allowing you to bypass geo-restrictions. You can then use the VPN settings on your router, so everything you do from your home is protected from people who want to spy on your activities. Most VPNs come in multiple versions, for example, there’s a VeePN version for Android, as well as options for Windows, iOS, or for direct integration into routers.
Safe browser extensions
You can reduce ads and unwanted tracking by using various add-ons for Chrome or Firefox. uBlock will stop most ads, as will Disconnect, which stops tracking scripts.
Anti-Virus / Malware
A secure router reduces your need for special software, but it doesn't hurt to have one for your device. With Windows, this software is built-in and works without issues for most people. Premium solutions, like F-Secure, have add-ons like parental controls and protection against web malware.
Software updates
It's an extreme example, but WannaCry was caused by outdated software. Keeping your software up to date is one of the most important things you can do. Malware and hacks come from people finding and exploiting weaknesses in code, so when an operating system or piece of software releases an update, it often fixes these kinds of things.
Reliable sources
Downloading items from trusted sources will limit your exposure to malware. Downloading pirated software or installing APK files on Android from unknown sources significantly increases the chances of infection.
2-factor authentication
Recently, Bodybuilding.com had its data breached, exposing all of its usernames and passwords, and a few weeks ago it was revealed that Facebook had allowed hundreds of millions of passwords for Facebook, Facebook Lite, and Instagram to be stored in plain text on an internal platform. This means that thousands of Facebook employees could have searched and found them.
2FA limits your exposure by requiring you to enter a code as part of your password. This is a code that is available for a specific time frame and often comes via your phone, although sometimes via email. Phone codes work best, as it means the hacker will need access to your phone to gain access to your account.
Password Management / Unique Passwords
There is some skepticism about password managers like LastPass or BitWarden, but overall, the security they provide is better than trying to do it yourself. They will help you generate completely random passwords for every site you log into, while also storing them and protecting them with a master password. Just make sure that the master password is long, complex, and fortified with 2FA.
Online account management
With GDPR and other major privacy breaches, many companies have been forced to make privacy management easier. We would suggest going through your social media accounts and tweaking your settings to limit how much of your personal information you reveal to the public. It’s also worth clicking a few unsubscribe buttons on your emails. We also recommend having a separate email address for anything you’re not 100% sure about.
Common sense
A little common sense goes a long way in everything you do in life, and the same goes for anything you do online. Don't download free paid apps from third-party sites, if a social media post or email sounds too good to be true, it's probably a scam.
Overall, there seem to be a lot of things to remember, but most of them are easy to implement. A few small changes to your habits will reduce your risk of privacy breaches or security concerns. The most important guidelines are keeping your router secure (via automatic updates), using a VPN to hide your identity, keeping software updates up to date, and creating unique passwords.
