Ramblings of an old Doc

 

ElanaAhova asked me for an app/extension to tell if a site was safe or not. That got me thinking. Seth Rosenblatt will help me, and sure enough, he did.

You know, there’s a good chance you’ve been phished.

Doesn’t matter which OS or device we’re talking about (unless it has no net capabilities like your fridge).

There's a really strong chance that somebody has sent you an e-mail or text message in an attempt to get at your personal information on purpose or inadvertantly, or sent you to a web page via another page.

That’s because data means money (to Google and just about everyone else as well), and you're a source of those bucks to them.

The best recommendation I can offer is to browse smart. Great, doc. So why take a thousand words for one sentence? Gonna tell ya how.

That means you really should double-check the URL’s of your banking site, social networking site, and e-mail site before you log in. In fact, all sites you’re directed to… the_Monk was referring to that sometime back when he wrote I shouldn’t use tinyurl. Point well taken.. although, I check ‘em all out before I hand ‘em out.

  • Most browsers, including Firefox, Chrome, and Internet Explorer, now include a color-change on the left side of the location bar to indicate that the site has been verified as legitimate.
  • It's always a good idea to type in the URL by hand, and never follow links from an e-mail (although, mousing over a link will reveal the URL, sometimes people forget).
  • If possible, check for HTTPS instead of the less-secure HTTP is a good idea, although HTTPS isn't foolproof.

“But what about that link to some supposedly hilarious video my best bud just posted to Twitter?”

There are several services you can use to verify a link.

  • Google Safe Browsing is a good place to start. Type in this URL http://google.com/safebrowsing/diagnostic?site= followed by the site you want to check, such as google.com or an IP address. It will let you know if it has hosted malware in the past 90 days.
  • HpHosts (http://www.hosts-file.net): Enter a site into the search box and its database will tell you if the site has been used to distribute malware or phishing attacks. HpHosts gives you more detailed information than Google Safe Browsing, if you're into that. Two other excellent services are Norton Safe Web, from Symantec, and Unmasked Parasites. Pop in the URL, and you're good to go. If the site comes back as unsafe, don't go.
  • Web of Trust is a signature based safe browsing tool. I had forgotten this (d'oh!) until Richie31 reminded me. Thanks, Richie31! Also, thanks to Captinmoonlight. Check this out!  http://billpstudios.blogspot.com/

Many security suites come with browser add-ons to check links you click on the fly. But they are signature based, so unless reported as unsafe, they’ll look “ok”. 

“Doc, I don’t have a suite.” OK – Elana, to answer your “bottom line” (finally):

 AVG LinkScanner (download for Windows | Mac) (did you check that link?!) is a free add-on that works with both Windows and Mac, and AVG's free Mobilation Android app (download) or Lookout Mobile Security (download) will block malicious links on your Android devices.

iPhone and iPad users are out of luck. That means me.. but it makes me think!

Even though phishing over social networking has been proven to work on iOS devices that haven't been jailbroken, Apple doesn't allow such link-checking apps. Apple believes on “reputation based” security: “We’re Apple so we’re secure. (LOL at you, Windows)”. Well, that just ain’t true. Apple, if anything, is less secure than Windows. Windows has just been attacked more since it’s the most prevalent OS.

Wake up, Apple!

 

Source: http://howto.cnet.com/8301-11310_39-20098098-285/how-to-check-if-a-web-site-is-safe/

Update:

Please note a nice discussion of this topic on Captinmoonlight's blogspot   http://billpstudios.blogspot.com/

Also another member (kona0197) has a malware removal guide on his blog, as well as a guide to building your own computer. Kona, please comment and supply links to those blog articles. 


Comments
on Sep 03, 2011

(unless it has no net capabilities like your fridge).
Unless you have one of these.

http://www.gizmag.com/go/1132/picture/166/

Great article Doc. Well written and informative with a touch of humor.  

What I hate most is a site that redirects you to some other site, you never know where you'll end up.

*Sorry, didn't realize the photo was that big. Removed and inserted a link instead.

on Sep 03, 2011

hehehe. Thanks, Wiz!

Inspiration is a good thing... except where doc's concerned. He loves Ps way too much! 

 

 

 

on Sep 03, 2011

An iFridge!

Just google "what's for dinner."

on Sep 03, 2011

There is also WOT (Web Of Trust) that lets users rate the reliability of sites. It even blocked my accessing a site that it said was a known attack site. 

on Sep 03, 2011

Another good check : VirusTotal, now with plugins for Firefox, Chrome and IE.

 

Virustotal is a service that analyzes suspicious files and URLs and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines.

http://www.virustotal.com/about.html

on Sep 03, 2011

Richie31 and coffeegrinder, thanks! This is the kind of participation that I hoped for when the job was given to me.

In fact... it's given me a new idea for an "Apps Central" sticky thread in Personal Computing Forums... where everyone can go and add an app he/she recommends and can write a short blurb and (please) don't forget a URL. Also, add "This may not be used as a testimonial nor for commercial purposes on any commercial site" to avoid exploitation (hopefully).

I'll post that thread later today or early tomorrow.

Thanks, people!

on Sep 06, 2011

There is one outstanding piece of advice that i always follow when using the internet.... Never never ever click on anything using the word 'free' !!!!

 

And then once everyone learns to take that advice, i suppose the tricksters will switch from using the word 'free' to using the word 'expensive' because who would ever suspect the word 'expensive' could lead to a scam??? Example... "this extremely expensive penis enlargement product with absolutely no free trial period is guaranteed to please"

The other thing i will never do while using the internet is to allow the installation of any features/addons that allow some website to function properly. If their website cannot function with standard browsing program then screw em, i will go somewhere else! Also that pluggin container is always up to no good.... I know this because whenever my browser gets really slow, i open task manager, stop the plugin container process and always without fail the browser springs to life again!

 

on Sep 06, 2011

HI DOC HERE IS ANOTHER GOOD ONE http://www.webutation.net/

on Sep 06, 2011

Folks, check this out:  http://billpstudios.blogspot.com/  A very nice discussion of phishing and WOT.

Bill, webutation is another good one though smaller than Web Of Trust, I think. 

on Sep 06, 2011

Wizard1956
An iFridge!

Just google "what's for dinner."

iDinner.

on Sep 06, 2011

to find this again

on Sep 06, 2011

I was reading an article on Download.com earlier about bogus certificates being created for, obviously, bogus sites. Would the services and add-ons you mention in this article help detect something like that. I would like to use WOT or something similar, but I use Starting Page as my search engine, and none of them seem to work with it. Anyone feel like offering up a good reason to go back to Google? I guess I can, now that I'm using Blogger. But I'm still wary.

on Sep 06, 2011

Comodo-Dragon detects them. All the services mentioned only "detect them" after they are reported.

Threatfire does that heuristically. 

on Sep 07, 2011

Hey Doc,   WOW, what a wonderful thing you have started here.  thank you so much!!!!!!! 

on Sep 07, 2011

Makeuseof.com put out an article about four sites you can use to check link safety:

http://www.makeuseof.com/tag/4-quick-sites-that-let-you-check-if-links-are-safe/

 

Nice services if you don't want to install anything....