Bridal shower scam

I saw this article "Scam touted bogus bridal show at Hynes..." on boston.com

Basically, beginning last Fall, some scammers set up a fake web site, Twitter accounts, and Facebook page to promote "The Boston 411 Bridal & Home Show 2010'' which was supposed to take place this week in Boston at the Hynes Convention Center.

"...an estimated 5,000 people paid at least $15 a person and that about 200 businesses also paid fees, ranging from $350 to $4,000. The payments were made through PayPal, police said."

A good reminder that just because something has a web site (or Facebook page or Twitter account, etc) does not mean it is legit. Also, don't believe everything you read about online!

ATM security

I don't use the ATM often, but when I do, I exercise the usual safety precautions (such as have my card ready, don't go too late or to an unfamiliar location, go to a well-lit ATM, etc.)

Over the years, I've also heard of people's card and pin numbers being stolen while they are using the ATM. Basically what happens is that thieves install fake readers/cameras in the ATM so that when you insert your card or press your pin number, that information is collected. The installed devices are cleverly hidden/disguised so you can't tell that the ATM has been tampered with. There was a recent story where a card skimmer was installed inside a gas pump.

See here, here, and here for some pictures of ATM skimmers.

So, when I have to use an ATM, I also:

• use an ATM that is not too isolated and generally seems to be in a secure location, such as an ATM in the same building as the bank (somewhere the ATM could not have been easily tampered with.)

• if I have to use a card to open a door to get into the ATM, I use a card different from my ATM card, in case there is a bad reader installed in the door-opening-card-reader device. (You can use any card with a mag stripe to get in.)

• use one hand to cover my other hand when I type in my pin number (in case anyone is looking, or if there was a camera that was installed in the ATM to record what I press.)

• don't use the ATM if it looks any bit sketchy, or if I have to jam my card in to get it in the machine. That might indicate that a card skimmer was installed.

Also, keep an eye on your accounts.

Gmail turns on https by default for all users

Before, I had blogged about how you an make your connection to gmail a little more secure.

Gmail is now turning on that setting by default. Nice! This basically protects your email as it travels between your browser and google's mail server.

You could buy a keylogger

(...although I'm not sure why you would.)

I've mentioned keylogging before, and how a malicious Mr. Stranger could trick you into installing some keylogging software on your computer, which records everything you type (including your passwords and credit card numbers!) and sends that info to Mr. Stranger.

You can install software-based keyloggers to monitor use of your computer. There are also hardware-based keyloggers - you can plug your keyboard into this small keylogging device and then plug that device into your computer. Anything that is typed on your attached keyboard is recorded by the device. You don't need to get onto the computer to install the software. And because there is no software installed, anti-spyware programs won't catch it, and the person using the computer won't notice it (unless they examine the back of the computer and find the device.)

I'm not sure why you would engage in such spying activities - it's an invasion of privacy! (Although I guess you could be a concerned parent, or a school librarian monitoring your computer lab, or a friend that needs to find out your friend's password so you can strategically plan the best surprise party ever, or just a mischievous sibling spying on your little brother or sister.)

Well, I was looking through the online store at thinkgeek.com the other day to get ideas for gifts, and I ran across a hardware-based keylogger that you can buy. And if you search for "keylogger" on amazon.com, you'll find a number of different models, some even more sophisticated/covert. I bet you could buy a keyboard with a secret built-in keylogger as well.

I wonder how secure public computers in the library, hotel, school, or internet cafe are, and how hard it would be for a regular person to install such a device on these computers. (Don't try it.)