brokerscloudflare

387CareyParker2018C.
Parker,FirewallsDon'tStopDragons,https://doi.
org/10.
1007/978-1-4842-3852-3IndexAAccountalerts,321Accountrecoveryquestions,324Adblocking,251–253AdminaccountMacOSadministratorpassworddialog,190–191logoutmenu,191removeadministratorconfirmationdialog,192restartmenu,192–193Users&Groups,189,190malware,174MicrosoftWindows7adminaccountsearch,175changeaccounttypedialog,177–178createaccountdialog,175–176createpassworddialog,176–177logoffmenu,178–179MicrosoftWindows8.
1addaccountsettings,180adduserdialog,181changeaccounttypesettings,182changePCsettingsmenu,179manageotheraccountssettings,181–182PCsettingsaccountmenu,180sign-inwithoutMicrosoftaccountoption,180–181sign-outmenu,182–183MicrosoftWindows10Accountsbutton,183Accountsmenu,184changeaccounttypedialog,185,188changeaccounttypetoadministratordialog,186changeaccounttypetostandarduserdialog,189createaccountdialog,184–185enable/disableservices,314–315loginscreen,187–188sign-outmenu,186–187AdobeFlashPlayerauto-updates,109install/downloadwebdialog,107–108Macdiskimageinstallerwindow,109preferences,110Windowsinstallerconfirmationdialog,108Adultcontent,331–332AlanTuring,47Antivirus(AV)software,21,155–156Avira,201effectiveness,193MSE,194–196WindowsDefender(seeWindowsDefender)Applications,24–25,27,33,36–37,39,385ASCII,26388Asymmetricencryption,50–51Attacksurface,73Authenticationandmessageintegritycryptographichashingfunction,52Dox-Raymachine,52–55man-in-the-middleattack,51mechanisms,56SuperLock,54–56X-rayimage,56Authentication,authorization,andaccounting(AAA),56–57BBackblaze,91–93,369Backupscloud,the,91–93connectingdrivetocomputer,81dataprevention,69externalharddrivedrivesize,81option,70,72USB-powered("portable")vs.
AC-powered,80USBversion,80MacOS,89–91MicrosoftWindows7BackupandRestoredialog,83–84Backupstartingdialog,84plugin,harddrive,82pop-updialog,82progressdialog,86selectiondialog,85MicrosoftWindows8.
1,86–87MicrosoftWindows10,88–89online,70–71options,69timetravelingdevice,69UPS,73WindowsandMacintoshcomputers,70Bandwidth,28–29,31,385Biometrics,114–115Bit,25–26,28–29,31,38,40,385BitLocker,154,203Blogsandwebsites,382Bluetooth,19,29,349,361,385Bot,35–36Botnets,35–36,225–226BrowsersBrave,257Firefox,256NetMarketshare,255Opera,257popular,255private,256secure,255–256TorBrowser,257Brute-forceattack,120Byte,25–26,29,38,40,385CCablemodem,220CambridgeAnalytica(CA),5,58,62,244,310CampGoldilocks,1CampLuddite,1CampPollyanna,1Cellulardataservice,349Centralprocessingunit(CPU),36Certificateauthorities(CA's),241–242Channelsurfing,239Checklists,9Chromeadd-ons,267–268,270Contentsettings,264Cookies,265Index389extensions,267Newincognitowindow,273passwordsandforms,265pluginsdecentraleyes,271DuckDuckGoPrivacyEssentials,270HTTPS,270LastPass,270uBlockOrigin,271privacyandsecurity,264settings,263Ciphertext,42,46–47CleanupCheckforupdates,100MacOS,99–100MicrosoftWindows7,95–96MicrosoftWindows8.
1,96–98MicrosoftWindows10,98–99Client,30Cloudbackup,70,91Cloudcomputing,30CloudFlare,274Cloudstorageservices,30,308–309,322Cloud,the,30,38,385Coldcalls,218Comcast,222ComputersecurityAVsoftware(seeAntivirus(AV)software)deletefile,156–157features,152–155iCloudandMicrosoftaccounts,150–152MacsandPCs,147–148nonadminaccounts,148–150passwords(seePasswords)Computersupportservices,218Controlledfolderaccess,150Cookies,247,265Creditbureaus,307Creditcardfraud,2–3Creditcards,320Creditfreeze,307,321–322Cryptographichashingfunction,52,54Cryptographyasymmetricencryption,50confidentialdocuments,50dataatrest,50datainmotion,50encryptionanddecryptionalgorithms,49HTTP,51packets,51symmetriccipher,48–49Cryptomator,322Cryptomining,36Cyberbullying,331Cybersecurity101AAA,56authenticationandmessageintegrity,51computersecurity,17cost-effectivemeasures,19cryptography(seeCryptography)desktopcomputersandlaptops,23encryptionandcryptanalysis,41exploit,37hardwareandsoftwareapplications,24–25bandwidth,28–29bitsandbytes,25–26Bluetooth,29clientsandservers,30cloud,the,30filemanager,25IoT,31–32netneutrality,30–31Index390networks(wiredandwireless),27–28peripherals,24storage,26–27hardwarebugs,36–37Internet(seeInternet)malware(seeMalware)Moore'slaw,24naturalresources,18NSA,18–20prevention,detectionandrecovery,20–22privacyandtrackingAcxiom,59AT&TandVerizon,60CambridgeAnalytica,58databrokers,58–59EULA,62GDPR,62informationgathering,60optout,datacollection,61pregnancypredictionscore,59smartTV,61TexasInstrumentsTI-/4A,23,99trust,62–63DDataatrest,50Databrokers,58–59Datainmotion,50Dave'sBootandNuke(DBAN),376DD-WRT,373Defenseindepth,21–22Digitalestateplanning,370DigitalExecutor,370–371Distributeddenialofservice(DDoS)attack,36DNAservices,324DNSproviderMacOSDNSsettings,282networkadaptersettings,281networksettings,280Wi-Firouteradminpage,274CloudFlare,274ISP,274Quad9,274Windows7/8.
1Changeadaptersettings,276NetworkandInternet,275NetworkandSharingCenter,275Windows10Changeadaptersettings,277DNSsettings,279–280IPv4settings,278–279networkadaptersettings,278NetworkandInternet,276NetworkandSharingCenter,277Propertiesbutton,277Documentaries,381Domainnames,39DomainNameService(DNS),39,243,253Dox-Raymachine,52–56Dropbox,293,309DuckDuckGo,268,270,359DynamicHostControlProtocol(DHCP),224EEdwardSnowden,251ElectronicFrontierFoundation(EFF),249E-mailaccountsaliases,319Cybersecurity(cont.
)Index391disposable,319Fastmail,319Gmail,319hacking,365–366Outlook,319sharedlogins,319userIDandpassword,318Yahoo,319E-mailsaccounts,300activityinformation,301AliceandBob,284attachments,302communicationbetweentwoservices,284withinsingleservice,284complexity,283credentials,325Dropbox,293Firefox,sharingfile,298–299hacking,4hoaxesandfakenews,301Keka(Mac),296–297links,302messagingapps,303PGP,293ProtonMail,292publicandprivate,292read,299–300scanningfiles,303serviceproviders,285spam,286,288,3037-Zip(Windows),294–295Encoding,26,43EncryptionandcryptanalysisAlanTuring,47cipher,42ciphertext,42,46–47EnigmaMachine,47–48frequencyanalysis,46LittleOrphanAnniesecretdecoderpin,44–45plaintext,42,46ROT13,43–44rotationalcipher,43securitythroughobscurity,41–42substitutioncyphers,42End-to-endencryption,289End-userlicenseagreements(EULAs),62,152,326EnigmaMachine,47–48Equifax,322Ethernet,28,385Ethernetcables,28,220–221,224Experian,322Exploit,31,36–37,47ExpressVPN,237FFastmail,292Feedback,14Filemanager,25,385FileVault,154Financialaccounts,321FindMyDeviceservice,154Finstaaccount,330Firefox,371add-ons,266–267,269cookiesandsitedata,261datacollection,262forms&passwords,260NewPrivateWindow,273permissions,262preferences,259–260security,263trackingprotection,261Index392Firewall,21–22,153,157Freezecredit,321–322Frequencyanalysis,46GGeneralDataProtectionRegulation(GDPR),62,378GlennGreenwald,251GNUPrivacyGuard(GPG),374GoldenRule,331,343GoogleAuthenticator,126,325download,133QRcode,134–135setup,133–134Google'sCertificateTransparencyproject,243GrandmotherRule,330–331Guestnetwork,233GuestWi-Firouter,372HHardware,19,24–25,36,58,385Hashing,118Haven,372Hostnames,39HyperTextTransferProtocol(HTTP),51IiCloudandMicrosoftaccounts,150–152Identifytheft,4,307Indirectthreats,5Informationleakage,253–254Instantmessaging(IM),285–286Internetbandwidth,29bitsandbytes,38,40cloud,the,30domainnames,39e-mail,38hostnames,39IPaddress,39–40mailcarrier,38netneutrality,31packets,40routers,21,40uploadinganddownloading,38USPS,38,40InternetofThings(IoT),31–32,36botnets,225–226firewall,225guestnet,234LAN,225Miraibotnet,226security,225InternetProtocol(IP),27Internetserviceprovider(ISP),219,222–223,231,235,385Intrusiondetectionssystems(IDSs),22IPv4,39IPv6,39JJailbreaking,350,361JavaControlPanel,110–111KKeePass,130Keyloggers,214–215Kick-buttpasswordmanager,323Index393LLastPass,215,270,322,359disablepasswordChrome,137Edge,138Firefox,137InternetExplorer,137Safari,137disallow,foreigncountries,135–136enabletwo-factorauthentication,133generateandstorenon-onlinepasswords,144–146GoogleAuthenticatordownload,133QRcode,134–135setup,133–134installationcomputer,131–132smartphone,132–133iOSandAndroiddevices,130KeePass,130one-timepasswords,136onlineaccounts,generatestrongpasswords,139–141securenotes,142–143securitycheck,138strongmasterpassword,131throwawayaccounts,146Leastprivilege,149–150,158Lightbeam,244LittleSnitch,373Localareanetwork(LAN),219,225,386MMacOS,9,11–12adminaccount(seeAdminaccount)AppCleaner,99–100auto-update,106Avira,201backupencryptionTimeMachinebackuppassworddialog,208TimeMachinediskselectiondialog,207TimeMachinepreferences,206–207diskencryptionFileVaultaccountenabledialog,205recoverykey,204,205restartdialog,206Security&PrivacyFileVaultsettings,203–204Security&Privacypreferences,203iCloudsettings,315–316iCloudsign-indialog,213–214parentalcontrolsenabling,340settings,341Users&Groupspreferences,340passwords,173–174SecurityPreferences,201Security&Privacysettings,317–318SystemPreferences,79third-partyprograms,200TimeMachinebackupconfirmationdialog,89diskeraseconfirmationdialog,90progressdialog,91usersandgroupspreferences,173–174Malvertising,252,255,271,386Malware,4,23,37,386bot,35–36Cryptomining,36PUP,34–35ransomware,34rootkit,36Index394scareware,34spyware,34trojan,33virus/worm,32Man-in-the-middleattack,51Marketinginformation,326Marketpressures,379Masterpassword,124–125Meltdown,36Messengerapps,286MicrosoftSecurityEssentials(MSE)download,194securityoptions,195updateprogress,195–196MicrosoftWindows7,10ActionCentersettings,313Addorremoveprograms,95adminaccount(seeAdminaccount)auto-update,101–102backupBackupandRestoredialog,83–84plugin,harddrive,82pop-updialog,82progressdialog,86selectiondialog,85startingdialog,84ControlPanel,76customerexperiencesettings,314KnowledgeBase(KB)softwareupdates,313MSE,194–196parentalcontrols,334–335passwords(seePasswords)relatedsettings,313Uninstallprograms,96MicrosoftWindows8.
1,11adminaccount(seeAdminaccount)auto-update,103–104ControlPanel,77–78FileHistory,86–87parentalcontrolschildaccountsetting,337ChooseauseandsetupFamilySafetymenu,337–338FamilySafetycontrolpanel,335–336FamilySafetyoptions,338FamilySafetysetup,336Manageotheraccountsmenu,337passwords(seePasswords)Uninstallprograms,96–98WindowsDefenderhomedialog,197search,196–197settings,198MicrosoftWindows10,11Addorremoveprograms,98adminaccount(seeAdminaccount)auto-update,104–105backupconfirmationdialog,89backupdriveselectiondialog,88Controlledfolderaccess,201–202ControlPanel,78–79FileHistorycontrolpanel,88parentalcontrols,339passwords(seePasswords)Uninstallprograms,99WindowsDefenderOpenWindowsDefenderSecurityCenter,199status,199Update&Security,198virusandthreatprotectionsettings,199–200Malware(cont.
)Index395Miraibotnet,226Modem,219–220,222–223,231,386Moderatepassword,158Moore'slaw,24NNationalConsumerTelecommunicationsandUtilitiesExchange(NCTUE),307NationalSecurityAgency(NSA),15,18–20Near-FieldCommunication(NFC),349,362Netflix,31,38Netneutrality,30–31,386Network,27,386configurationitems,229disableauto-connecttoWi-Fi,235disableexternaladmin,233disableexternalservices,233guest,233IoT,225–226,234ISP,219,222–223,231,235LAN,219lockdown,Wi-Fi,232modem,219–220,222–223,231registerdevices,234resetequipment,229router,231routerIPaddressesandadmincredentials,230ShieldsUp,236SSIDs,233update,router'sfirmware,235userIDandpassword,232VPN,226–228,236WAN,219Wi-Firouter,221,223–224WPA2/WPA3,232NetworkAddressTranslation(NAT),153–154,157,223Nonadminaccounts,148–150NordVPN,237OOnlinebackups,70–71Onlinebanking,305–306OnlineMicrosoftaccountsettings,312Onlinesafetyaccountalerts,321accountrecoveryquestions,324Cloudservices,322creditcards,320creditfreeze,321–322DNAservices,324e-mailaccounts,318–319e-mailcredentials,325financialaccounts,321MacOS,315–318MicrosoftWindows7/8.
1,313–314MicrosoftWindows10,314–315personalinfo,323publicsources,326Signin,323socialmediaaccounts,326–328termsofservice,326travelplans,broadcast,323two-factorauthentication,325viewprofile,325virtualcreditcardnumbers,320Onlineshopping,305–306OpenDNS,344OpenWRT,373Operatingsystem(OS),386versions,9Optimism,378Index396PPackets,40Panopticon,249–251Papershredder,212–213ParentalcontrolsMacOS(seeMacOS)MicrosoftWindows7,334–335MicrosoftWindows8.
1childaccountsetting,337ChooseauseandsetupFamilySafetymenu,337–338FamilySafetycontrolpanel,335–336FamilySafetyoptions,338FamilySafetysetup,336Manageotheraccountsmenu,337MicrosoftWindows10,339Parentalguidanceaccess,accountsanddevices,342adultcontent,331–332agerestrictions,342Chromebook,343computersincommonarea,343createcontract,344Cyberbullying,331dedicatedaccount,333devicetracking,344friends,343GoldenRule,343GrandmotherRule,330–331Internet,329–330OpenDNS,344protectidentities,342resources,345reviews,342Passwordhaystacks,125Passwordmanagers,121–123,130Passwords,370authentication,114–115biometrics,114–115brute-forceattack,1208-character,120crack,estimatedbrute-forcetime,121creatingandremembering,113FacebookandGmailaccounts,119facialrecognitionsystem,114favorite,113fingerprintscanner,114freeaccount,114Gmailaccount,126GoogleAuthenticator,126guessingtechniques,118hacked-site.
com,118identity,114LastPass(seeLastPass)MacOS,173–174master,124–125MicrosoftWindows7createpasswordforaccount,161–162personalizationsettings,162screensaversettings,163useraccountssettings,160–161MicrosoftWindows8.
1changeaccountsettings,165–166createpasswordsettings,166–167manageaccountssettings,164–165personalizationsettings,167–168screensaversettings,168–169useraccountssettings,164MicrosoftWindows10createpasswordsettings,171lockscreensettingssearch,171screensaversettings,172sign-inoptionssearch,169–170sign-inoptionssettings,170moderate,158Index397most-used2017,116–117multi-factorauthentication,125offlineattacks,115–116,120onlineattacks,115–116onlinebankaccounts,114other-site.
com,118PCsandMacs,159periodicallychange,127–128PIN,119–120,123,126,128protection,215punctuationcharacters,120scrambledversions,118scramblingprocess,118specialcharacter,113SQRL,115strong,119,158two-factorauthentication,125–126unique,119userID,116userinput,115PDFreaderapp,217Peripherals,19,24–25,29Personalidentificationnumber(PIN),119–120,123,126,128Personalinfo,323Personalsecurity,15Phishing,3Plaintext,42,46,48Podcasts,382PotentiallyUnwantedProgram(PUP),34–35PrettyGoodPrivacy(PGP),293,374Preview,217Privacyandcybersecurity,381vs.
security,6tools,373Privatebrowser,256ProtonMail,289,292ProtonVPN,237Punycode,287,302QQuad9,274Qualityofservice(QoS),224RRadiofrequency(RF)technology,349Randomaccessmemory(RAM),26–27Ransomware,34,368,386RaspberryPi3,376Rooting,350,361Rootkit,36ROT13rotationalcipher,43–44Router,40,220definition,386DNSservice,253firmware,235IPaddressesandadmincredentials,230password,232ShieldsUp,236Wi-Fi(seeWi-Firouter)SSafesurfingadblocking,251–253add-ons,265–268Amazon.
com,243certificateauthorities(CA's),241–242cloud,the,239computercommunications,240DNS,243,253Index398DuckDuckGo,268HTTPS,240,243informationleakage,253–254installFirefoxandChrome,258MicrosoftandApple,239pop-ups/plugins,271securityandprivacysettingsChrome,263–265Firefox,259–263"Shady"sites,271teenagerhackers,242TLS,240trackingtech(seeWebtracking)typesofcertificates,242webbrowsers,240webpages,239websitesandinformation,272Safetydepositbox,369Sale/donationMacOSadminaccount,212nonadminaccount,211MicrosoftWindowsadminaccount,211nonadminaccount,210Scareware,34Securebrowser,255–256Securecommunicationasymmetricencryption,289e-mails(seeE-mails)end-to-endencryption,289financialinformation,289options,289PDFfiles,290spamandspoofedmessages,286–288textmessaging,285–286zipfiles,290SecureDrop,374SecureQuickReliableLogin(SQRL),115Securitybreach,366Securitythroughobscurity,41–42,147SensitivefilesMacOS,209–210SSD,209Windowseraser,209freeraser,209Server,30,386Servicesetidentifiers(SSIDs),233SHA-256,54Shellshock,37ShieldsUp,236ShortMessageService(SMS),285SilentCircle,376Smartphonesaccessfeatures,356adtracking,357backupAndroid,355iOS,354–355biometrics,356BluetoothandNFC,361cheapAndroidphones,360DuckDuckGo,359EFFwebsite,361enable(self)tracking,358erasedata/reset,362–363hacking,350–351,361iOSvs.
Android,347–348LastPass,359lockdevice,356messagingapps,360personalinformation,347privacy,351–352removeunusedapps,358Safesurfing(cont.
)Index399updates,355VPN,360–361wirelesstechnologies,349–350Snailmail,380Socialmedia,309–310accounts,326–328Software,21–22,24–25,31–37,42,58,62,386Solid-statedrive(SSD),209Spam,3,5definition,386andspoofedmessages,286–288Spectre,36Springcleaning,73–75Spyware,34Stayingup-to-date,12–13Strongpassword,158Substitutioncyphers,42Supercookie,60SuperLock,54–56Symantec/Nortonproducts,156Symmetriccipher,48–50Sync.
com,322TTermsofService,326TexasInstrumentsTI-99/4A,23Textmessaging,285–286Threatanalysiscreditcardfraud,2–3e-mailhacking,4identitytheft,4phishing,3spamandscams,3trackingandsurveillance,5virusesandmalware,4TimBerners-Lee,239Tomato,373TorBrowser,374Tracking,5TransportLayerSecurity(TLS),240TransUnion,322Trojan,33TunnelBear,237Two-factorauthentication,325,370UUninterruptiblepowersupply(UPS),73,94UniversalPlugandPlay(uPNP),233USBdevices,215–216U.
S.
PostalService(USPS),38,40,220VVariations,10Virtualcreditcardnumbers,320Virtualmachine(VM),375Virtualprivatenetwork(VPN),226–228,236,349,360–361Virus,4,13,32,367–368VLAN(virtualLAN),227WWebaddresses,12Webcams,217WebCAPTCHAform,35WebSitepasswordbreach,366–367Webtrackingcookies,247Lightbeam,244marketingdataanalysis,248metadata,244Index400Panopticon,249–251sensors,248uniqueidentifier,248websites,244Wikipediagraph,245Wikipedia+Yahoograph,245Yahoo+Amazon+Dictionarygraph,246–247Yahoo+Amazongraph,246Wideareanetwork(WAN),219,386Wi-Fi,19,42,386andcellulardata,349802.
11b,802.
11n,and802.
11ac,221logos,28router(seeWi-Firouter)Wi-Fihotspots,221,222,349Wi-Firouteradminpage,274CloudFlare,274DD-WRT,OpenWRT,andTomato,373–374DHCP,224Ethernetcable,224guest,372Internetsecurity,223ISP,274NAT,223QoS,224Quad9,274sample,221WindowsDefenderMicrosoftWindows8.
1,196,198MicrosoftWindows10,198–200WiredEquivalentPrivacy(WEP),232WirelessLANs(WLANs),221,386WirelessProtectedAccessversion2(WPA2),232Wirelessrouters,220Worm,32X,YXfinityWi-Fiservice(1-800-XFINITY),236ZZero-dayexploit,37Index