New advice site debunks IT security myths

An IT security entrepreneur has lauched ITSecurityGuide.co.uk, a free site offering security tips for businesses and consumers.

Data Defender director Graham Batsman is the man behind the site that sets out to educate business and home-users on how to avoid potential threats.

“We will not just talk about firewalls, antivirus software and evil hackers trying to penetrate your network. For most business and home-users this is much as they know about securing their data but there are many other scenarios where things can go wrong.”

Typically, most computer users install a firewall and anti-virus programme and think these will solve all of their security worries. One page on the site tackles this and other common IT security myths, including:

• Antivirus software provides adequate protection - No antivirus scanner is 100% accurate. Every day dozens of viruses are created so it’s hard for antivirus software to keep up ... which is why updates are released daily.
• Most malware comes from emails - not anymore, it doesn’t. Websites are regularly created to spring “drive-by” infections on computers that visit them.
• Website security - Claiming protection from the latest 256bit military grade encryption can be misleading, as it only encrypts data sent between the client (your PC) and the server (the website). Data stored on your computer or their server is secure can still be at risk.
• Macs are bulletproof - So long as Microsoft holds sway in the marketplace, the bad guys will often target its platform. But more users means more threats, so the Apple boom will have some unwelcome side effects.
• Infections shout - Five or more years ago and most viruses would flash messages on the screen or open pop-ups. These days they have become silent and can send personal data off-site without anybody realising.

To launch the site, ITSecurityGuide.com also published some startling facts:

• WEP (Wired Equivalent Privacy) can be cracked in as little as 10 minutes
• Operating system log-in prompts can be cracked
• 1 in 20 e-mails are infected with malware
• Formatting hard drives does not guarantee that data is gone forever
• Roughly 1 in 3 computer users has been a victim of viruses, spyware or phishing

None of the above is earth-shattering, but IT security is not like that: it’s basically a state of permanent, educated paranoia and the ITSecurityGuide.co.uk site does a very good job at supplying basic facts and advice, plus interesting articles on topics such as how mobile phone hacking works.

The site should be welcomed alongside resoruces such as Graham Cluely’s popular NakedSecurity blog as a new contribution to public awareness on the issue. It’s also a very clever way to raise the company’s profile by putting its expert knowledge to good use.