http://www.aviary-mag.com/Martin/Safety/safety.html
And You Thought You Were Safe!



The realm of computer security is not an isolated slice of life reserved for geeks and bitheads. Security is all inclusive, no longer a realm of obscure networks or sensitive databases full of nuclear codes and credit card numbers. I know this may be hard to swallow for many people as they haven't given the matter serious thought. Stop reading for a minute and think about all things computerized in your life. Now consider which ones present potential security or privacy concerns to you. If you think any less than 90% or so present these problems, think again.

Some will cast this notion aside in favor of the argument that so many security concerns are so trivial that they make no real difference. Who cares if someone knows you visited a web site or purchased something online right? This argument can effectively be countered any number of ways as long as the reader is willing to to give them appropriate consideration. First, each of these small concerns add up. To use an old but familiar and fitting analogy, consider each privacy violation a brick. Put enough of these bricks together and you have a full blown wall. Second, at what point do they stop being small and trivial? If you convince yourself that each security vulnerability is small, they slowly begin to grow without you acknowledging it. Before long, they have turned into full blown risks that your mind associates with 'trivial'.

So in a single day, where do you encounter these risks? Anytime you use technology. Before you say "But I don't use it that much!", think about how much technology surrounds your life. In many cases it has become so integrated that you often stop noticing it. Have a personal organizer like a Palm Pilot? Play games on a Sega Dreamcast? Send e-mail to friends or family via an on-line service? Have controlled access to your office via 'strong' token cards? These points of technology slowly add up and paint a bigger picture of rapidly degrading privacy while security vulnerabilities increase in number. All of the above, and we've barely touched serious computing as far as most people are concerned.

To anyone reading this that is passingly familiar with computer based news outlets like Wired, MSNBC and others, this is no doubt preaching to the choir. For those of you new to the net, I write this in hopes that you are fully aware just how vulnerable your computer setup and system can be. The disturbing trend emerging in people's reactions to security is that perception says if you aren't online, you are safe. I hate to break this to you, but connectivity has little to do with security and privacy. All it takes is a single ten second connection to the net and game over.

You boot up your computer and interface with the Operating System. Be it Windows NT, Windows 95, Solaris or any other platform, it is potentially vulnerable. When you open your browser, it too poses more risks than you can possibly imagine. Both Microsoft Internet Explorer and Netscape Navigator have had their fair share of problems. Even in seemingly safe applications like Microsoft Word lurks danger. Users connecting to the net via cable modem learned quickly that while their walls protected them from neighbor's prying eyes, their modems certainly did not.

As with all articles on security, I try to present the problem and a solution for my readers. What can I possibly suggest to counter such an overwhelming amount of intrusions into your personal privacy and security? Awareness. Just understanding and realizing the concerns better equips you to battle the hoards of bad guys we always read about. Be proactive when using anything electronic, assess the risks, and proceed with caution. All joking aside, it may save you a lot of headache in the near future.


Brian Martin (bmartin@attrition.org) Copyright 1999