Are Antivirus and Firewall Sufficient for Good Security?

Whenever people talk about computer and internet security, they talk about malware which consists of virus, trojan, worms, spyware and many more. When they come to talk about the solution for those threats, the solution is to get an antivirus and firewall to do the work.

The question now is, are they sufficient for a good computer and internet security? I would say ‘No’. It is very irresponsible to put the blame into that awesome software when you become a victim of malware infection. I believe that software like antivirus and firewall are there to help you in achieving good security, but not creating some sort of plasma shield to you.

The reasons why you have a poor security

As I said, you can’t blame the software for being too poor as the reason that you to get infected. Part of the reason why you are infected can be several below.

You are too careless when handling incoming links from email

Incoming links from emails especially from an unknown sender are usually malicious. They don’t lead to valuable site but either phishing site or malicious site. If you happen to land on a malicious site, your computer will most probably infected with virus, trojan, or worm the next minute.

If you don’t update and patch your operating system, the wounded area is the target for hackers

Sad to say, there is no such thing such as perfect software. Software is always 95% complete where 5% is the section for bugs and vulnerabilities to exist. It is the matter of time whether those vulnerabilities are found.

If the creator happened to find those vulnerabilities before the bad guys, they will still able to patch the wounded area. So if you don’t update and apply the patch, you will the one targeted by hackers to exploit your vulnerabilities.

You are the owner of your computer, not the administrator

Many of us think that being the owner of the computer means being the administrator as well. But do you know that Microsoft did not design it this way for us? There is an option to create a Standard User and there is User Account Control (UAC) so that we will use our computer in the way that we don’t have full privileges to do everything, same goes to the hacker.

A set of keysBy having a strict UAC, you will realize that every single time you run an application that might affect your System files, you will be asked for permission. The benefit here is, if a hacker tries to run an application to harm your system files, I bet you will know it as well when your UAC pops up.

My verdict to poor security

Having a bad security does not mean your antivirus is not efficient enough or your firewall is not solid enough. At times, it is the user who lacks of experience in handling computer threats. As a result, it is important to always stay alert whenever you are browsing the internet.

If you want to learn more about security, you can grab my copy of eBook for free on how to Build Your Own Security.

See Anyone You Know? Face Recognition Comes Of Age

The National Academy of Sciences are about to publish an article in their proceedings entitled ‘Privacy In The Age Of Augmented Reality’, co-authored by Alessandro Acquisiti, Ralph Gross and Fred Stuzman. It is about developments in face recognition software.
How 2D facial scanners record identitiesTo use the authors’ words the document

“investigate(s) the feasibility of combining publicly available Web 2.0 data with off-the-shelf face recognition software for the purpose of large-scale, automated individual re-identification.”

They are also working on an app that can do it all from your phone! See the FAQ section here for more information. The article reports a series of experiments conducted over the last year or so during which the researchers try to identify a person from their photo using an over the counter face recognition software using information that is freely available over the internet.

The results are interesting. The experiments are as follows:
Students walking through the university campus were asked if their photo could be taken and to complete a questionnaire. As they were answering the questions the computation task was carried out, looking for a picture match on Facebook and requiring only seconds. In this case more than 30% of the students were immediately traced.

Because the faces were the same but the photos taken from different angles, humans had to decide which of the possible matches were the most appropriate, but that is not always the case. Some photos are replicated and therefore the computer can give a 100% guarantee that the match is correct.

For example in another experiment the researchers used an online dating agency that provided anonymous photos. In this case they could match names to the photos in about 10% of cases. In several cases the same photo had been used on different sites.

In a third experiment the knowledge gained was used to search for further private information, all freely available on the web, such as details of sexual preference, date and place of birth and this information even allowed them to generate the first five figures of the individual’s US social security number.

So it seems that we can draw a simple conclusion here, either now or in the very near future, as these technologies are improved and made freely available, anybody will be able to recognize anybody they see on the street, identify them through an app in their telephone, and find out about their interests and other personal information, if they have ever posted (or had posted for them) a photo of themselves on the internet.

For more information, please read my face recognition article on the Bassetti Foundation website.

Google gives users malware warnings

Yes you read right, Google is now giving users alerts if it believes that their system is infected with malware.

Over the last week, millions of users will have logged on to Google, only to find a warning telling them that Google believes that their computer ‘appears to be infected’.

Here is an image of that very message:


A Google warning telling users that their computer appears to be infected

Okay my PC isn't infected so I couldn't show you an actual message, but a clever bit of Photoshopping can help me to show you 😉

Google says that it is trying to improve the web for users, and in doing so, it believes that it can enhance users experience, and keep them safer online.

Malware can send users to ‘virus’ pages when they search Google, one of the main reasons why Google wants to help users fight it. The other is that often malware can send tonnes of spammy traffic towards Google. This is not very good for their servers, and could potentially become very costly.

Sometimes Google needs to turn some of its servers off for maintenance, meaning they need to redirect the traffic. However certain malware can keep ‘spamming’ these servers with unwanted traffic, causing the guys at Google a bit of a problem!

Google says that the main cause of malware infection is users downloading face anti-viruses when instructed to by bogus warnings on false websites.

The search giant does currently offer warnings to users on some websites that it knows could potentially infect their computer. Here is an example of the text it may put below a potentially dangerous search result:

This site may harm your computer

An example of the "This site may harm your computer." text that features below some search results in Google

Keeping safe online is a challenge, so it’s good to know that along with our anti-virus software, Google is also watching our back.

To find out more you can read the official blog post on Google’s blog 🙂