Information Technology

May 18, 2008

Security tips for Net-connected travelers

It's never been easier to stay connected while you're traveling—just make sure you're not leaving yourself wide open to snoopers in the process. Check out these tips for staying connected and secure at the same time.Internet cafés: Always a welcome haven for weary travelers looking for news from home and messages from friends and family, your garden-variety Internet café is also a playground for hackers looking to grab your info. Unlike networks at home or at work, Net cafés networks (be they in the U.S. or abroad) are pretty much wide open, meaning that it’s a cinch for anyone to follow your every click and keystroke—and that includes any usernames, passwords, or messages you send.
  • Sign in securely: Want to log in to your Web mail? Don't do it unless you can do so securely. Most major Web mail services (such as Yahoo! Mail or Gmail) give you the option to send your username and password over a secure Web page. Check the address bar in the browser you're using; if you see a padlock icon or "https://" in the URL, you're good. If you only see "http://," however, any login info you send will go "in the clear," meaning that network sniffers will be able to snag your username and password with ease.
  • Uncheck the "keep me signed in" option: Most portals and Web mail clients will remember your login info so you don't have to sign in every time—and that's especially convenient for snoopers looking to access your accounts. Clear out the "keep me signed in" checkbox when you first log in, and make sure you're fully signed out when you're done surfing.
  • Pretend it's a postcard: Even if you've logged in securely, many Web mail services still send e-mail messages over unsecured Web pages. Keep that in mind when you're composing your missives—don't send credit card numbers, social security info, passport numbers, or anything else you consider sensitive. After all, you wouldn't write your credit card number on the back of a postcard, right?
  • Clear browser histories and caches: If possible, erase your tracks when you're down browsing. Look under the "Internet Options" drop-down menu (not all Net cafés let you do this, unfortunately), and delete the browser's history and caches files. This won't permanently erase the Web files you downloaded, mind you, but it'll make it tougher for the next user to see where you've been browsing.
  • Keep an eye out: Here's a simple but effective method some hackers use to break into your accounts: simply looking over your shoulder as your enter your username and password. Take a quick look and see if anyone's lurking behind you before you log in.

Wi-Fi hotspots: Wireless access points make to log on if you're traveling with your laptop, but if anything, public wireless access points can be even more insecure than Internet cafés. That's because snoopers can easily—and wirelessly—sniff unsecured Wi-Fi traffic, looking for passwords and personal info. You might even log onto an "evil twin": a benign-looking hotspot that's actually run by a hacker.
  • Follow the Net café rules: Most of the tips I've listed for Internet cafés apply to open Wi-Fi hotspots as well. You don't have to worry about completely logging out your Web mail (unless someone steals your laptop, that is), but treat e-mail messages and info sent over unsecured Web pages as if they can be read by anyone.
  • Careful with IM: It may be tempting to fire up your IM client and start chatting away, but again, keep in mind that most IM apps send messages without encryption.
  • Disable sharing preferences: Have file sharing enabled on your laptop? If so, you're leaving your system open to attack every time you log into an unsecured hotspot. Luckily, Windows XP and Vista will prompt you for security settings whenever you access a new network; make sure to lock down your laptop by picking the most secure Internet "zone." Mac users: select System Preferences, Sharing, and turn file sharing off.

Cell phones: Luckily, the digital networks used by today's cell phones are considerably more secure than, say, an open Wi-Fi hotspot (although I'd think twice about sending my social security number via SMS). That said, here's a few tips to consider when dialing while you're abroad.
  • Password-protect your phone: Here's the problem with losing your phone while you're on the road: not only are you out a handset, there's also a good chance that whoever found your phone will start making calls, snooping around your old messages, and combing through your contacts. Your phone's password lock isn't exactly NSA-approved, but at least it'll stop opportunists from snooping around and/or running up your bill. Also, if you do lose your phone, contact your carrier immedialy to suspend your wireless service.
  • Beware roaming charges: Don't make calls while you're abroad without first checking with your carrier about international roaming plans—and this applies for both voice and data calls. (Just ask the travelers who checked their e-mail every hour and came home to massive phone bills.) More of a consumer tip than security advice, I know, but still worth mentioning.
Have any security tips for travelers that you'd like to share? Fire away.

No comments: