Collarspace Discussion Forums


Home  Login  Search 

RE: Is it true that if you do not log out of CM that you are more vulnerable for your acct to be hacked?


View related threads: (in this forum | in all forums)

Logged in as: Guest
 
All Forums >> [Casual Banter] >> Off the Grid >> RE: Is it true that if you do not log out of CM that you are more vulnerable for your acct to be hacked? Page: <<   < prev  1 [2] 3 4   next >   >>
Login
Message << Older Topic   Newer Topic >>
RE: Is it true that if you do not log out of CM that yo... - 10/14/2012 4:51:25 PM   
sexyred1


Posts: 8998
Joined: 8/9/2007
Status: offline

quote:

ORIGINAL: oregongirl

LookieNoNookie then I guess i am totally fucked (and not in the good way). I guess I need to log out every 27 minutes? Even if I am in the chatroom?

Thanks, I think I will private message you tomorrow for a 1-1 tutorial that will keep my computer healthy and not having any one knowing my residence. Now I am getting spooked!



It sounds as if you are not getting that his post was a joke.

Please tell me I am wrong.

(in reply to oregongirl)
Profile   Post #: 21
RE: Is it true that if you do not log out of CM that yo... - 10/14/2012 4:52:38 PM   
kalikshama


Posts: 14805
Joined: 8/8/2010
Status: offline
Thanks Red. I had the same question.

_____________________________

Curious about the "Sluts Vote" avatars? See http://www.collarchat.com/m_4133036/mpage_1/key_/tm.htm#4133036

(in reply to sexyred1)
Profile   Post #: 22
RE: Is it true that if you do not log out of CM that yo... - 10/14/2012 5:00:50 PM   
LookieNoNookie


Posts: 12216
Joined: 8/9/2008
Status: offline

quote:

ORIGINAL: oregongirl

LookieNoNookie then I guess i am totally fucked (and not in the good way). I guess I need to log out every 27 minutes? Even if I am in the chatroom?

Thanks, I think I will private message you tomorrow for a 1-1 tutorial that will keep my computer healthy and not having any one knowing my residence. Now I am getting spooked!



I know...it's difficult for many to comprehend that I have a brain the size of a small galactic nebulae.

(I blame myself).

(in reply to oregongirl)
Profile   Post #: 23
RE: Is it true that if you do not log out of CM that yo... - 10/14/2012 5:02:35 PM   
LookieNoNookie


Posts: 12216
Joined: 8/9/2008
Status: offline

quote:

ORIGINAL: sexyred1


quote:

ORIGINAL: oregongirl

LookieNoNookie then I guess i am totally fucked (and not in the good way). I guess I need to log out every 27 minutes? Even if I am in the chatroom?

Thanks, I think I will private message you tomorrow for a 1-1 tutorial that will keep my computer healthy and not having any one knowing my residence. Now I am getting spooked!



It sounds as if you are not getting that his post was a joke.

Please tell me I am wrong.


My statements were clear and unabridged.

I apologize if my gigantic brain interfered with some people's grasp of the facts.

(in reply to sexyred1)
Profile   Post #: 24
RE: Is it true that if you do not log out of CM that yo... - 10/15/2012 4:47:28 PM   
JeffBC


Posts: 5799
Joined: 2/12/2012
From: Canada
Status: offline
I think spacespank had it right. An open and active connection is a vulnerability if you're on an unsecured network (starbucks) and not using a VPN and someone decides to sniff the network traffic (easily done with cookie cutter hacking tools). At that point they could intercept the session and they'd have some degree of latitude in terms of doing stuff. But if the password change screen here requires the old password they wouldn't be able to change passwords so whatever damage they did would be temporary in nature. If you actually changed your password while on an unsecured network that certainly could've been sniffed.

Realistically, most people who are hacked have no real clue how it happened so they make stuff up. Usually, as spacespank said, it's due to opening ridiculous attachments.

_____________________________

I'm a lover of "what is", not because I'm a spiritual person, but because it hurts when I argue with reality. -- Bryon Katie
"You're humbly arrogant" -- sunshinemiss
officially a member of the K Crowd

(in reply to oregongirl)
Profile   Post #: 25
RE: Is it true that if you do not log out of CM that yo... - 10/15/2012 5:00:07 PM   
oregongirl


Posts: 119
Joined: 10/27/2005
Status: offline
OK, i did not get the joke from LookieNoNookie. I guess I will ask a techie friend about these kinds of things. some of us do not really understand the back doors of internet stuff.

Anyway, thanks JeffBC. I do not open ridiculous attachments.

Is there a good thread here for healthy internet practices, or even outside this forum?

(in reply to JeffBC)
Profile   Post #: 26
RE: Is it true that if you do not log out of CM that yo... - 10/15/2012 7:51:29 PM   
descrite


Posts: 459
Joined: 5/14/2012
Status: offline
SANS.org; they have a free resources library. They have templates for common operating systems/platforms, so you can just follow the step-by-step checklist and harden your system.

SecurityFocus.com.

Both US-CERT and Carnegie-Mellon's CERT are fantastic; the former for basics, the latter for more advanced stuff.

Do NOT use software solutions (antivirus, "security" programs): they are almost uniformly crap, and interfere with your use, and harvest your data-- I call them "paid malware."



(in reply to oregongirl)
Profile   Post #: 27
RE: Is it true that if you do not log out of CM that yo... - 10/16/2012 5:03:14 AM   
Aswad


Posts: 9374
Joined: 4/4/2007
Status: offline
quote:

ORIGINAL: descrite

Password reuse is a big risk (using the same password for everything you log into)...but it's really the only practical way to remember your password. The problem, of course, is that when one password/site is compromised, all your accounts are.


Hardly the only practical way. It's just a question of compartmentalization. Most people don't need many compartments.

IWYW,
— Aswad.


_____________________________

"If God saw what any of us did that night, he didn't seem to mind.
From then on I knew: God doesn't make the world this way.
We do.
" -- Rorschack, Watchmen.


(in reply to descrite)
Profile   Post #: 28
RE: Is it true that if you do not log out of CM that yo... - 10/16/2012 8:28:19 PM   
descrite


Posts: 459
Joined: 5/14/2012
Status: offline

Aswad, if you have more than eight accounts/logins (say: iTunes, email, work, Amazon, PayPal, eBay, FetLife, CM, and Roku), yes, it is impractical to remember multiple passwords: human beings are good at remembering up to seven discrete elements (that, in addition to permutation, is why our phone numbers are that length).

I am hard-pressed to think of a demographic is that is both online and confined to less than eight accounts.

Even if you only have eight, and you want to split into two passwords (one each for very four sites), you now have proactive mental interference ("was that Password A for this site? or Password B?"), increasing the possibility of lockout through challenge failure. This goes up exponentially with arbitrary website complexity requirements...which, as xkcd has shown, are ridiculously stupid compared to the use of passphrases (http://xkcd.com/936/).



(in reply to Aswad)
Profile   Post #: 29
RE: Is it true that if you do not log out of CM that yo... - 10/17/2012 10:55:27 AM   
oregongirl


Posts: 119
Joined: 10/27/2005
Status: offline

quote:

ORIGINAL: descrite

SANS.org; they have a free resources library. They have templates for common operating systems/platforms, so you can just follow the step-by-step checklist and harden your system.

SecurityFocus.com.

Both US-CERT and Carnegie-Mellon's CERT are fantastic; the former for basics, the latter for more advanced stuff.

Do NOT use software solutions (antivirus, "security" programs): they are almost uniformly crap, and interfere with your use, and harvest your data-- I call them "paid malware."



Thanks descrite. I am researching what you posted here now. I have an email sent to my ISP to ask what internet security they have provided to me.

Do you know if this is a good program to use? I have it on my computer now.
http://www.ghostery.com/

Also, since I might keep coming up with more and more questions, is there a better place to post my computer questions then here?

I don't know the solution regarding passwords because I do have so many, including 3 at work. I guess I can walk around with my flash drive and have them all at my figure tips that way.

Think I should get rid of Avast without having any security on my system at all?

(in reply to descrite)
Profile   Post #: 30
RE: Is it true that if you do not log out of CM that yo... - 10/17/2012 11:08:07 PM   
descrite


Posts: 459
Joined: 5/14/2012
Status: offline
Ummmm....in answer to your questions about Ghostery and Avast:

quote:

Do NOT use software solutions (antivirus, "security" programs): they are almost uniformly crap, and interfere with your use, and harvest your data-- I call them "paid malware."


Yes. In this context, "software," "programs," and "applications" should be used interchangably. Get rid of all of them.

They may, in fact, be causing you trouble.

Feel free to post any questions here. Please remember, though, in terms of value: you get what you pay for.




(in reply to oregongirl)
Profile   Post #: 31
RE: Is it true that if you do not log out of CM that yo... - 10/17/2012 11:59:44 PM   
littlewonder


Posts: 15659
Status: offline
I think you are overreacting to the situation. I doubt he took anything from your computer other than a few apps you said he could use your computer for but if you are still scared, then just change the password to your computer, unless this guy is a hacker and knows how to get around that but most from my experiences with men is that very few know how to hack, let alone operate a computer much.

And yes I keep my computer logged in all the time, even when I am at a coffeehouse or somewhere. If someone sees it, so what. I usually have it minimized until I want to use it again. Most people don't care what is on your computer or that you are into bdsm. Most either shrug it off or is not listening or watching you because they are caught up in their own little worlds in their head.

I personally wouldn't worry about it if it happened to me. I'm just not that paranoid.

As for passwords, I pretty much use the same password for all accounts but something with a different number sequence. If I do forget the password I just do the retrieve password and get a temp password and then just change it to something similar to my other passwords.


_____________________________

Nothing has changed
Everything has changed

(in reply to descrite)
Profile   Post #: 32
RE: Is it true that if you do not log out of CM that yo... - 10/18/2012 4:42:56 AM   
ChatteParfaitt


Posts: 6562
Joined: 3/22/2011
From: The t'aint of the Midwest -- Indiana
Status: offline
Using FR:

I have a simple password system that works for me.

I have one basic password for all my non-business and non-financial accounts (CM, Pogo, AllRecipes, Amazon, etc.) this one hasn't changed in years.

I have a different password for business accounts (email, websites) this one gets changed every couple years, more often if my pc has been exposed to a "threat."

I have a third password for my online banking and paypal accounts, and it changes monthly or there abouts.

This means I only have to remember three passwords, don't have to change them all the time (I'd never remember), certainly don't keep a folder on my pc called "passwords" (how not secure is that?) but have fairly decent password security.

I recommend it.


ETA: I never log out of CM either, never been hacked. IMO, the "I've been hacked" line is a player move for why he has so many accounts or user names.



< Message edited by ChatteParfaitt -- 10/18/2012 4:45:17 AM >


_____________________________



(in reply to littlewonder)
Profile   Post #: 33
RE: Is it true that if you do not log out of CM that yo... - 10/18/2012 9:26:43 AM   
SpaceSpank


Posts: 244
Joined: 10/3/2010
Status: offline

quote:

ORIGINAL: descrite

Ummmm....in answer to your questions about Ghostery and Avast:

quote:

Do NOT use software solutions (antivirus, "security" programs): they are almost uniformly crap, and interfere with your use, and harvest your data-- I call them "paid malware."


Yes. In this context, "software," "programs," and "applications" should be used interchangably. Get rid of all of them.

They may, in fact, be causing you trouble.

Feel free to post any questions here. Please remember, though, in terms of value: you get what you pay for.




That is terrible advice. There are numerous bits of malware out there that can infect a system without a person having any clue that they have been infected or that they have a continuing infection. A/V and anti malware products are about the only thing your average person can do to prevent much of that.

Now, they shouldn't go getting any and every piece of self proclaimed software that exists for sure. Many of them actually ARE malware, exploiting paranoia to get them to install the software and all but blackmailing them to allow them to remove it without wiping the system clean.

I always recommend the Microsoft security essentials for windows pc's since it's going to be one of the least intrusive options, it protects against most everything that most users have a chance of protecting against, and it's free.
Likewise there are other tools which run only when you want them to do so (like malware bytes) that are fairly decent.

Nothing, not even the OS hardening tools, is going to protect against an unpatched 0 day exploit that infects your PC. But the major A/V and anti malware tools will catch things once identified, and can sometimes catch unidentified variants of popular infections.

Recommending people to go without such things is preciously the same as saying you don't need to wear a condom because you are sterile. While it's true you may certainly at least THINK you're protected from some things, the truth is that the majority of people lack the resources, knowledge, or even interest in being able to remove malware, let alone to be able to identify their system is infected with anything short of blatantly obvious varieties.


I do agree with you on the plethora of "pc cleaner, security utility" style programs which do nothing. All you need is a basic router and a non intrusive a/v program. If you have no router and only plug into a modem with no protection, a software firewall is not perfect but it's better than nothing.

(in reply to descrite)
Profile   Post #: 34
RE: Is it true that if you do not log out of CM that yo... - 10/18/2012 9:48:25 AM   
oregongirl


Posts: 119
Joined: 10/27/2005
Status: offline
Thanks for eveyone's input here. Yep, everyone has a different opinion :) My ISP suggested I remove Avast and download and install Norton which is free from Century Link, so I did that last night. I realize that ISPs are not very knowledgabe about these things, but I ran this question about A/V to at least 5 people and they said Avast is pretty good but Norton is better protection. I see today it caught 35 cookies, but CCleaner does the same thing, tracks and deletes cookies, right? I did have Malwarebytes, but it kept giving me errors so I removed it. I also defrag, but that's just to optimize performance.

Some people say that Norton is very invasive and it's almost impossible to delete it all from one's computer. Geez, which way to go. I would like to take classes about this stuff because if and when I can get a new computer, I want to start fresh.

I have been backing up my data (pics, music and documents) to an external HD, so at least if anything goes wrong with this 4 year laptop, I have backed up.

(in reply to SpaceSpank)
Profile   Post #: 35
RE: Is it true that if you do not log out of CM that yo... - 10/18/2012 10:14:44 AM   
mnottertail


Posts: 60698
Joined: 11/3/2004
Status: offline
Comodo Internet Security (ports wizard make all inbound ports invisible)

CleanUp!

my recommendations. 

_____________________________

Have they not divided the prey; to every man a damsel or two? Judges 5:30


(in reply to oregongirl)
Profile   Post #: 36
RE: Is it true that if you do not log out of CM that yo... - 10/18/2012 10:29:13 AM   
SpaceSpank


Posts: 244
Joined: 10/3/2010
Status: offline
WHo you talk to on your ISP would depend on how much they know, as a rule their default knowledge base is pretty abysmal.

And it's not that norton is "bad" per se. On some years it rates higher or lower in actually doing its job well than others, but it's still at least decent.

The big issue is that they, like many others, have gone from simple, unobtrusive, simple, and efficient programs to these bloated behemoths with endless add on features, menu's, sub menu's and countless versions and iterations of the same basic function.

What should have a few easy and simple menu's and take up almost no resources is now this convoluted mess that can take up huge chunks of your systems memory.

quote:

ORIGINAL: oregongirl

Thanks for eveyone's input here. Yep, everyone has a different opinion :) My ISP suggested I remove Avast and download and install Norton which is free from Century Link, so I did that last night. I realize that ISPs are not very knowledgabe about these things, but I ran this question about A/V to at least 5 people and they said Avast is pretty good but Norton is better protection. I see today it caught 35 cookies, but CCleaner does the same thing, tracks and deletes cookies, right? I did have Malwarebytes, but it kept giving me errors so I removed it. I also defrag, but that's just to optimize performance.

Some people say that Norton is very invasive and it's almost impossible to delete it all from one's computer. Geez, which way to go. I would like to take classes about this stuff because if and when I can get a new computer, I want to start fresh.

I have been backing up my data (pics, music and documents) to an external HD, so at least if anything goes wrong with this 4 year laptop, I have backed up.



(in reply to oregongirl)
Profile   Post #: 37
RE: Is it true that if you do not log out of CM that yo... - 10/18/2012 12:07:32 PM   
Aswad


Posts: 9374
Joined: 4/4/2007
Status: offline
quote:

ORIGINAL: descrite


Aswad, if you have more than eight accounts/logins (say: iTunes, email, work, Amazon, PayPal, eBay, FetLife, CM, and Roku), yes, it is impractical to remember multiple passwords: human beings are good at remembering up to seven discrete elements (that, in addition to permutation, is why our phone numbers are that length).


You are talking about working memory, not long term storage, ergo not relevant.

And ChatteParfait apparently hasn't had any trouble arriving at what I suggested by herself.

IWYW,
— Aswad.

P.S.: I prefer passphrases myself, when a site permits it.


< Message edited by Aswad -- 10/18/2012 12:13:48 PM >


_____________________________

"If God saw what any of us did that night, he didn't seem to mind.
From then on I knew: God doesn't make the world this way.
We do.
" -- Rorschack, Watchmen.


(in reply to descrite)
Profile   Post #: 38
RE: Is it true that if you do not log out of CM that yo... - 10/18/2012 1:23:30 PM   
littlewonder


Posts: 15659
Status: offline
I use webroot. I've had no problems with it and it will block sites which it feels is possibly loaded with viruses. You can then make a choice to go to the site or continue to block it.



< Message edited by littlewonder -- 10/18/2012 1:24:19 PM >


_____________________________

Nothing has changed
Everything has changed

(in reply to Aswad)
Profile   Post #: 39
RE: Is it true that if you do not log out of CM that yo... - 10/18/2012 6:07:45 PM   
LookieNoNookie


Posts: 12216
Joined: 8/9/2008
Status: offline

quote:

ORIGINAL: oregongirl

I was interacting with someone causally on CM and he told me that his Profile had been hacked that that is the reason why he had to change usernames and a whole of other stuff. He said the reason was because he did not log out of the CM site. Is this true, or could it be true?

Also, I have had so many worst one liners for the first contact to me on CM, that I have been collecting them (some are hilarious). I am wondering where to post that, in what section? I'm sure all of us have experienced these unfortunate one liners that come at us where we block and delete, and I would love to hear about yours, lol.

thanks!

Oregongirl


I actually hack my own profile on occasion just so I can say "it's not you....it's me".

I hope that helps.

(in reply to oregongirl)
Profile   Post #: 40
Page:   <<   < prev  1 [2] 3 4   next >   >>
All Forums >> [Casual Banter] >> Off the Grid >> RE: Is it true that if you do not log out of CM that you are more vulnerable for your acct to be hacked? Page: <<   < prev  1 [2] 3 4   next >   >>
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts




Collarchat.com © 2025
Terms of Service Privacy Policy Spam Policy

0.094