IT

In this regular column Charles Zealey, of ITSolve, covers all aspects of business and personal computing. If you have a question about IT matters, e-mail it to Charles at: itmatters@itsolve.co.uk
The subject of online security has come sharply into focus recently as a result of the attack on the Sony Playstation network and the revelation that some 77m accounts including usernames, addresses, passwords, credit card details and security answers have been compromised.Coming hard on the heels of a number of other examples of data being lost through hacking attacks it serves as a reminder to us to be vigilant in our use of online services.
How can that be?
We have to face the fact that such attacks will continue, and will continue to be successful. If a giant corporation such as Sony can become a victim, there are many others who can too. Given the nature of the information that has supposedly become available we must assume that Sony was storing the information in un-encrypted form. While this is certainly not good practice, and not wanting to condone them, we need to understand that as consumers, our constant demand on suppliers for more features and functions, places great demands on R&D departments, and may well lead to corners being cut.
What should I do?
Firstly and foremost, pay attention to PC security. Maintain your computer with the latest updates for the operating system, application software and anti-virus products. Don’t download anything you are not sure about. This includes anything purporting to be anti-virus software. If you are not sure just don’t do it, but seek advice quickly.
Secondly, be careful with our online accounts. Try to avoid using the same usernames and passwords for different accounts. Yes I know it’s difficult, but if your Sony account used the same password as your online banking account would you not be just a tiny bit worried? Change passwords as often as you can bear.
Running systems
If you are responsible in any way for running or maintaining systems with security sensitive information do ask hard questions of your suppliers or developers. Ensure all relevant information is encrypted and that systems are secured against unauthorised external access.
Don’t ignore the threat from within. Think through the way in which your information is handled and who has access. Information security is a complex field, but the consequences of ignoring it, as Sony have found, can be serious.






