- Know who you are visiting. Ask them about their privacy policies and scripting methods. Encourage other sites to display their privacy commitment to you and all scripts being used.
- Turn off all Active-X content features within your browser's preferences.
- Implement a simple batch file that deletes the cookie files you have accumulated daily, like my doubleCookie crusher program.
- Use HushMail or better yet a remailer like Replay for email. Never disclose personal information when filling out online forms; make everything up or use some other info.
- Be aware that Windows keeps track of your activities in various locations. To completely eliminate all traces of a single visit to this site one may have to do the following (or download Tweakui from www.download.com [search for "tweak"][NOTE: not for Windows98, special version of TweakUI for 98 is on the Windows98 cdrom):
- Delete contents or the specific reference to this site in c:\windows\history
- Delete contents or the specific reference to any files opened in c:\windows\recent
- Delete contents of Temporary Internet Files or empty brower's cache
- Delete any file downloaded and saved to disk, possibly residing in "c:\My Documents"
- Visiting other sites may also require you to later:
- Delete contents or specific reference to the site in c:\windows\cookies
- The directories "c:/temp" and "c:\windows\temp" can sometimes contain temporary files once used by the system and did not get deleted. Any file beginning with the ~ tilde ~ character that is not an open current document can be safely deleted. Microsoft Word uses temporary files.
- Some newsreaders like Agent keep copies of all files downloaded from the Newsgroups in the directory ex: c:\agent\, c:\agent\data, c:\agent\incoming. Also, Agent keeps copies of all message bodies to include files downloaded in files named: c:\agent\data\*.dat. Flush/purge all message bodies.
- Do not stay connected 24hrs/day unattended (port invaders, use Plisten or Port Listener), turn off file & printer sharing while online. This can be dual-configured in Win95 (in Networking, tci/ip properties ), if done correctly.
- Change passwords often, use at least 8 characters (12 or more is better) using a mixture of upper and lower alpha, numeric, and special (@#$%^&...) characters; do not use words found in any dictionary, or "consecutive characters" (ex: "gh", "45"). A good password looks like this: rM4qB93pXg. Special characters are not always possible, and using zeros (0) and the letter O (O/o) can be confusing to you the user. Same with "l" (L), "I" (i), and "1" (one). A bad password looks like this: "startrek" or "55555"
- Do not allow your mail program to log events. Mail-Pop passwords (usually the same as login pw's) are typically recorded and are openly displayed in these log files. AT & T users will be thrilled to find all their account info is kept unscrambled and openly readable in a file called "account.txt". Anyone with access to your files for eight seconds can have the key to your system.
- To be 100% secure while online, keep any sensitive material on your computer located on disconnected media. Partitions, hidden directories, and password protected files are not enough (possible exception is NTFS).
- When formatting, operating systems pass along the formatting machine's ID to the new media, whether it be a hard drive, zip disk, tape, or floppy. These serial numbers are generated using the OS's algorithm and the unique machine id# of your computer. There are ways to circumvent this, with probably the floppy media being the easist. Use pre-formatted floppies or follow the hacker/cracker linkz on the kewl Links page for more info on preventing the generation of identifiable serial numbers.
- Keep your Virus Scanner's dat-files up to date. McAfee updates theirs monthly. A virus' sole function may be to report file content information back to another server somewhere, all without the user's knowledge ever. Never run or open unknown files with the extensions: exe, com, reg, or bat. These executable files could contain viri or destructive code. Do not allow your browser and/or unzipping software to automatically run/open these types of files. Ansi-bombs hidden in text files are possible but rare (they may damage your monitor but not your computer). Word document files may contain macro viri, though these types are less-malicious than viri found in executable files.
- Object (should you desire) to DejaNews' practice of recording all Usenet speech by writing them first (to object), then use the "x-no-archive: yes" header as the first line of your Usenet post to prevent their automatic archiving. While DN has provided for the x-header method, it is easily defeated when someone replies to your original post and includes your message as part of their reply (one good reason for objecting).
It is possible to delete from Deja's database a post you may have previously made, though it requires one to register (free). Still, if someone quotes your reply, you cannot erase this.
- If possible, use an Internet Provider who utilizes "dynamic IP addressing", providing you with a different IP address whenever you log on. A newer scheme, "tunneled IP addressing", changes the IP five-six times a minute so I've heard.
- Your ISP's employees may be your weakest link. Among other devious activities, some have been known to forge headers to harass others. It may be extremely difficult to prove that your own ISP is breaking the law using your identity. The seriously paranoid (or crafty) might archive electronic and print copies of all software used and their email transactions at their personal attorney's office.
- A well managed computer's file system is a secure one. Know exactly what every file on your computer is for and it's origin. Uninstall useless programs. Doing a total Win95 re-install to include reformatting is *the best* way. It is a big chore, but will also make your system run faster with less faults. Remember, you can be held responsible for long forgotten files, even ones found in your browser's cache!!! Perform a complete file audit monthly, pruning away the deadwood. To "wipe" your drive, fill it full of junk files then delete...do this 3x.
- Your privacy elsewhere is not necessarily sacred anymore....Texas, for instance, uses prison employees to enter and maintain the data collected by the Texas Department of Public Safety (your name, address, employer, auto license plates, driver license number, concealed
handgun license, social security number, phone#, family info, ID photo, etc). This highly unusual access of information by convicted felons is presently being investigated (but by who?) in Texas to see if (duh-yes...) our privacy is being sold straight out of the prison system into the hands of street criminals.
Nothing would surprise me....remember this: You are not being paranoid if someone is really out to get you.
S-cape
Privacy Statement
-
I, Mr Double, hereby pledge that all information received by me is kept 100% private and not to be repeated, revealed or published anywhere without your express permission beforehand, to include email addresses AND correspondence, stories (fact or fiction), and anything else that might be transmitted to me electronically via email, ftp, cybersex, etc.
Under no circumstance will email addresses be sold, traded, given away, or disclosed in any manner imaginable to anyone, nor will any email lists be generated and stored for any other future purpose (exception is the "friendly reminders" I send to members whose account is due to expire.) ALL correspondence between you and I is considered by me in all respects superior to a Doctor/patient confidentuality relationship, superior in the sense that not even a court order would have the authority or impact over me. Furthurmore, this site refuses to collect, or otherwise display in any manner IP address information, nor will it ever implement any sort of active-x, java, or 'cookie' scripting (exception is the online signup form which tracks IP#s to prevent fraud.)
To be exact, there are only two types of cgi-type scripting operating at this site: one counter script to tally the number of hits generated by visitors, and the cgi-script known as "mailto" which allows email links to be displayed for the various authors. One additional counter, known as 'X-PageCount', is placed on the Authors' pages.
The only time information of a reader's visit here leaves this site is when the visitor him/herself writes to an author without masking their own email address beforehand. This should not be a great concern, as I am in full contact with all (but 2-3) the authors, and would feel comfortable disclosing my real identity to them all. Note: That does not mean I would tell them where my foxy cousin lives.....
Keep in mind, other sites linked to on these pages may not follow the same privacy commitments, and I cannot vouch for their methods. I am aware of many other counters, cgi-bin, active-x & java content/scripting that are fully capable of displaying and recording your machine id, IP address, other sites you may have visited, and are even capable of reading and reformatting your hardrive's directory tree. As technology progresses, one may expect furthur intrusions into your computer.
What to do.?.?.?
|
A MrDouble Production: mrdouble Changes last made on: Tuesday PM, October 19, 1999 |
|
|
|---|