{"id":312,"date":"2017-10-31T06:00:32","date_gmt":"2017-10-31T11:00:32","guid":{"rendered":"https:\/\/rb-sns.com\/RB\/blog\/?p=312"},"modified":"2017-10-30T07:43:55","modified_gmt":"2017-10-30T12:43:55","slug":"security-suggestions-and-keeping-safe-from-hackers","status":"publish","type":"post","link":"https:\/\/rb-sns.com\/RB\/blog\/security-suggestions-and-keeping-safe-from-hackers\/","title":{"rendered":"Security Suggestions and Keeping Safe From Hackers"},"content":{"rendered":"

The news is filled with stories about hackers and data theft. \u00a0Although they are not to be ignored, hackers can be avoided or thwarted with some common sense. \u00a0Let’s look at a few of these common-sense steps and some additional ways you can protect your self and site.<\/p>\n

Secure Passwords<\/h2>\n

This is a common warning. \u00a0Nevertheless, the vast majority of passwords are anything but secure. \u00a0Studies have found<\/a> that there are a large number of “default” passwords used. \u00a0These include tough to guess ones like “password”, “123456”, and “qwerty.”<\/p>\n

This password laziness is being combatted by rules applied to a lot of sites. \u00a0This is where your password is required to include things like upper and lower case letters, a number, and maybe special characters. \u00a0This is a great way to define all of your passwords. \u00a0I find converting sentences to be great. \u00a0For example, you can start with, “My three kids are Billy, Sara, and Michael” becomes “m3kaBSaM.” \u00a0Note that I just took the first character of each word in the sentence and adjusted case while throwing in a number rather than word.<\/p>\n

Avoid Phishing Attacks<\/h2>\n

These attacks are prevalent, but also easy to avoid. \u00a0They typically take the form of an “important” email from a co-worker or financial institution. \u00a0Some emails ask you to call a number and then that call will be a way for the scammer to get your information. \u00a0This is solved by not calling or at least not providing private information on a phone call to someone you are not sure of. \u00a0The other approach is to include an attached file that runs a program when opened. \u00a0Do not open attached files unless you are sure of the sender. \u00a0Even in those cases, make sure you have anti-virus software installed that will scan emails.<\/p>\n

These attacks are more effective than one would expect. \u00a0However, they prey on our lack of patience with email and our tendency to open and click on any attachment. \u00a0If you are more intentional in how you process your inbox you will see these attacks for what they are.<\/p>\n

Going Deeper<\/h2>\n

When you have a website or application to secure it requires more than avoiding hackers. \u00a0In these instances, the hackers are likely to come to you. \u00a0Thus, steps need to\u00a0be taken to secure or harden your server.<\/p>\n

The good news is that there are a number of step-by-step guides freely available on the Internet. \u00a0There are even some great security\u00a0portals like the Open Software Security Community<\/a>. \u00a0While most of these tutorials are well-intentioned, take a close look at the site before embracing any of the suggestions. \u00a0The best sources are from security companies and vendor sites. \u00a0When in doubt, do some checking to make sure the site is legitimate.<\/p>\n

There are some general steps that all of these sites will recommend.<\/p>\n