The Simple TechBlog » Security

Quick Security Tip: PayPal Security Key

Christopher Sisk — Wed, 08 Aug 2007 22:52:30 +0000

PayPal, teaming up with VeriSign, has recently released a new hardware SecurID device to help increase the security available to their users. The PayPal Security Key is a small dongle-like device that generates an algorithmic 6-digit password token every 30 seconds. Once activated, independently for each account, the current token must be entered when logging into your PayPal or eBay account. This means even if someone gets a hold of your username and password, they still won’t be able to log in to your account without the 6-digit token.

Since the security key is activated independently for each account, the same device could eventually be used for other VeriSign-owned companies and websites as well.

Leo Laporte and Steve Gibson interviewed Director of Account Protections at PayPal, Michael Vergara in episode 103 of their weekly podcast, Security Now for an in depth look at how the security key works to keep your account safe.

If you use your PayPal or eBay account regularly or are concerned with the security of either of those services, the Security Key is highly recommended. The PayPal Security Key is available for an introductory price of $5.

Quick Tip – Read-Only Email

Christopher Sisk — Fri, 18 May 2007 04:32:50 +0000

Posting your email address online, publicly, is usually not a good idea. Unfortuately, there are times when you just have to do it. One way to avoid the onslaught of spam is to use Read-Only email services. These are web services that allow you to create throw-away email address. You then visit their site to check the email address for incoming email. Two services we like are:

DodgeIt.com – DodgeIt is a great service. Just put any email name in front of “@dodgeit.com” and you’ve got an instant, read-only email address. For instance, simppletechblog@dodgeit.com. Then go to dodgeit.com and enter your email name into the field to check for any emails sent to that account.

PookMail.com – Pookmail works exactly the same as dodgeit. Think of an email name, put iit n front of “@pookmail.com” and check for mail in that account at the PookMail.com website.

These services can be great for registering at unknown websites, forums, blogs, or any untrusted place you need to post an email address.

Sunday Security Tip – Use A NAT Router

Christopher Sisk — Sun, 22 Apr 2007 23:00:35 +0000

The internet is full of background noise. Worms, viruses, malicious code, and unsolicited junk are all floating around out there, looking for computers that will let them in, and they’ll never go away. When you plug your computer directly into the internet, you’re opening the door to all that background junk.

For broadband internet users, a basic NAT router is one of the best first lines of defense you can have in the battle to keep your computer secure. Even if you only have one computer in your home, I still, highly recommend purchasing a simple 4-port NAT router.

NAT routers create a LAN (Local Area Network) of multiple computers all sharing the same Public (External) IP address. The router provides each computer in the LAN with an Private (Internal) IP address that it uses to identify one computer from the next.

Every time you request something on the internet, like a web page, the NAT router makes a note of what it was and who requested it. So when that data comes back, the router knows who to send it to. When the router receives data that it can’t match to a request from its LAN, it simply discards it. NAT routers inherently provide firewall protection because they don’t let any data into the LAN that hasn’t specifically been asked for by one of the network’s computers. So all the unsolicited junk, spam, worms, viruses and other background noise gets thwarted at the router before it even reaches your computer.

For more in depth information on NAT Routers and how they keep you safe, I recommend listening to Security Now! episode #3 (NAT routers).

For Dial-Up users, a software firewall is still one of the best options. I recommend Kerio Personal Firewall as an excellent (and free) software firewall.