You’ve probably heard someone say, “I won’t try that new version until they’ve worked the bugs out”.  “Bugs” is another term for “issues” and often times newly released upgrades or versions of just about anything technological will have “bugs”.  Browsers are no different.  Software bugs can range from annoying to frustrating, depending on what stops working.  Sometimes, however, there are bigger things to be concerned about than bugs and those are Security Vulnerabilities

A critical security vulnerability means your computer and other devices can be exposed to download attacks and hacks.  If a browser has security vulnerabilities, an unsuspecting user will surf to a maliciously rigged website where the attackers can steal identity information, banking information and passwords. 

Each year, browsers are tested and security weaknesses exposed.  In Nov. 2010, a list of these browsers and the number of security weaknesses was published. 

Google Chrome ranked number one for most susceptible to attack with 76 vulnerabilities.  Next, Apple Safari ranked number 2 with 60, Mozilla Firefox was number 3 with 51, Microsoft Internet Explorer sat at number 4 with 32 and coming up at number 5 was Opera with 6.

None of the versions of these browsers were indicate but experts are saying that the browsers’ positions haven’t changed much since the report. 

Not all vulnerabilities in these browsers are exploited by the evil doers in this world, but many of them are and thankfully, there are ways to protect yourself while surfing the internet.

One the best ways you can thwart an attack is to keep your browser plug-ins up to date.  Java is one of the most vulnerable plug-ins, but also the most frequently “patched”.  If Java wants you to update, just do it! 

Purchasing an internet security program like Norton or McAfee and keeping the subscription up-to-date can be a big help in preventing your online activities from becoming a nightmare.

One of the ways in which the Internet Black Hats (bad guys) attack unsuspecting victims is through a type of attack called Phishing.

In a typical phishing attack, the victim receives an email message that appears to come from a legitimate source such as their bank, PayPal, Amazon, or Facebook. The message often looks exactly like a real message from one of those sources.  The message mentions some dire circumstance that the victim can clear up simply by clicking on the included link.  The victim thinks they are going to the website of the sender when in fact they are directed to the hacker’s website where their browser/computer is attacked.

Phishing attacks work because when the victim clicks on the link in the mail message, the browser dutifully looks up the domain (web address) with a DNS Query (ref2) and sends the victim to the specified website. 

But what if the DNS Query failed? What if the DNS server that is looking up the web address knew that the hacker’s website was dangerous and refused to let you go there?  That’s what OpenDNS does (read One Million Phishes That Didn’t Happen).  Instead of blindly going where the email pointed, it adds some smart decision making designed to protect your computer, or your personal data, from malicious intent. 

OpenDNS is just one more tool Comstar uses to help protect its customers.  Comstar’s internal systems and internet access customers are protected from these types of attacks automatically. 

OpenDNS can protect you too – at home or at work.  For more information, visit OpenDNS.com.

© 2012 Comstar's Blog - Website Tips & Tricks Suffusion WordPress theme by Sayontan Sinha