You could buy a keylogger

(...although I'm not sure why you would.)

I've mentioned keylogging before, and how a malicious Mr. Stranger could trick you into installing some keylogging software on your computer, which records everything you type (including your passwords and credit card numbers!) and sends that info to Mr. Stranger.

You can install software-based keyloggers to monitor use of your computer. There are also hardware-based keyloggers - you can plug your keyboard into this small keylogging device and then plug that device into your computer. Anything that is typed on your attached keyboard is recorded by the device. You don't need to get onto the computer to install the software. And because there is no software installed, anti-spyware programs won't catch it, and the person using the computer won't notice it (unless they examine the back of the computer and find the device.)

I'm not sure why you would engage in such spying activities - it's an invasion of privacy! (Although I guess you could be a concerned parent, or a school librarian monitoring your computer lab, or a friend that needs to find out your friend's password so you can strategically plan the best surprise party ever, or just a mischievous sibling spying on your little brother or sister.)

Well, I was looking through the online store at thinkgeek.com the other day to get ideas for gifts, and I ran across a hardware-based keylogger that you can buy. And if you search for "keylogger" on amazon.com, you'll find a number of different models, some even more sophisticated/covert. I bet you could buy a keyboard with a secret built-in keylogger as well.

I wonder how secure public computers in the library, hotel, school, or internet cafe are, and how hard it would be for a regular person to install such a device on these computers. (Don't try it.)

Is this link good?

A number of friends have clicked on a bad link, and then unfortunately had something bad happen (some virus/spyware was installed on their computer.) How can you tell if a link is real/good? A few things to keep in mind:

1. Is the link really what it says it is? Put your mouse over the link. For example, the following link says it's going to http://www.m-w.com. However, if you mouse over it and look at the actual link as indicated near the bottom of your browser, it's actually going somewhere else.

http://www.m-w.com

2. Does the link have a domain name you'd trust?

• To figure out the domain name, look at the right-most portion before the first '/' (while reading from left to right.)
  For example, amazon.com is the domain name in this URL: www.amazon.com/gp/goldbox/ref=cs_top_nav_gb27
  
  
• If the domain is unfamiliar, you may not want to go there:
  www.someplacesketchy.net/deals
  
  
• Some links may look like they go somewhere safe, but don't really:
  www.amazon.purchases.com/todaysdeals
  In the above example, purchases.com is the domain name. NOT amazon.com!

If the link looks sketchy, I'd avoid opening it.

3. I've already warned you about redirecting, shortened URLs.

4. Who sent it to you? A stranger, a friend, a trusted company? Emails from strangers are probably SPAM. You may trust a link from a friend, unless their account has been hacked (or they just don't know it's a bad link.)

5. In what context did you receive the link? Was the link sent to you in a Facebook message, an email, instant message, etc that was (1) short (little or no other text), (2) had no context, (3) general, (4) looks like anyone (or a robot) could have sent it to you, or (5) seemed to come out of no where (you haven't spoken to this person in a while)? If so, beware! The message may not have come from who you thought it came from.

Using someone else's computer

When using a computer that's not my own - at the library, hotel lobby, an internet cafe, or even a friend's house - I exercise caution and usually avoid entering in passwords or any sensitive information. Do I have trouble trusting people? No. (My friends are awesome!) But what I can't be sure of is whether they've maintained their computer adequately enough to avoid any security holes.

Maintaining a secure computer takes a bit of work - you need to have a firewall, run virus scan every so often, download new updates to your operating system, internet browser, or other software... Can I trust the owner of the computer has taken care of that?

Can I trust that the computer I am using is clean? Many people download and install various programs (people especially like free software) on their computers all the time. That software might have had some spyware bundled with it. Lots of people also like to open cute little email attachments not knowing something else is also attached. It's so easy to have some spyware/virus put on your machine. If you click on a malicious pop-up ad or surf to some bad site, something might get installed without you knowing.

Can I trust that the computer administrators have used strong enough passwords and maintained their computers sufficiently to protect their accounts from being hacked? Can I trust that some smart kid didn't install some spyware on the library or hotel computer without anyone knowing?

If there is some spyware installed on the computer, information about me - where I surf, what I type (including passwords, account numbers...) - could be recorded and sent to Mr. Stranger.

Hopefully one day, they (computer makers/software developers) make it easier to keep your computer secure.

When using not-my-own computer, I typically just surf and avoid tasks that involve me entering in sensitive information (like logging into email, online banking...) If I'm traveling and I don't have my own computer or Blackberry, and I really have to check email, I'll usually change my password when I get home, just to be safe.