At the CSM-ACE 2010

I was recently invited to attend this event called the CyberSAFE Ambassadors Convention held at the KL Convention Centre.

The convention is part of Cyber Security Malaysia's week-long Awards, Conference and Exhibition (CSM-ACE) outreach program to educate the public about safe internet usage. FYI, Cyber Security Malaysia (CSM) is an agency under the Ministry of Science, Technology and Innovation (MOSTI) that is in charge of our country's cyber security.

If you're thinking "why should I care?", well here's why: so much of our lives is spent online now - on Facebook, on Twitter, blogs, Foursquare and countless other "social networking" sites. Have you ever thought that maybe you're not so safe online? Ever wondered if people can find everything they need to know about you from your FB profile to plan a kidnapping? It’s all very real, and that's why CSM has organized this series of events.

Anyway, the convention I attended was a platform for four notable experts on IT security to share their knowledge with us non net-savvy folk. I managed to catch two speakers and was honestly surprised at how much I DIDN’T know about online security. First up was Mr Azli Paat who talked about SMS and internet scams.

PROtip#1

I remember my dad getting an SMS claiming he had "won" a big cash prize from Shell. So he replied with a text message saying he'd forward the message and their number to Shell. Bad move. According to Azli, whenever you receive such SMSes you SHOULD NOT REPLY as it will be a sign to the scammers that your number is active. The same thing for bogus emails. Do not try to be smart by contacting or threatening them; instead forward the message to RakanCop at 32728.

Here's how: start your SMS with RC and insert the offending message. The police are obliged to respond as it is part of their KPI to do so. Alternately, you can send an email to aduan@mmcp.org.my - this is the complaints email for the Malaysian Mobile Content Providers Association. 

PROtip#2

For internet scams, a good way to check if a bank account number is valid is to simply Google it. If the number exists in Google, it is a scammed account. I think it’s because internet businesses are not supposed to reveal their account numbers online. Azli also joked that the "http" in URLs is short for "have to type properly".

PROtip#3

As for internet banking, you're supposed to insert the exact URL of the e-banking website. Some links could fool you into thinking they're the real thing, so be cautious and use only the URL provided by your bank.

Finally, try not to use public computers or public WiFi for internet banking. There is such a thing as “DNS poisoning” where a hacker hijacks public WiFi servers. If you absolutely must transfer money to your LV-loving girlfriend/boyfriend via public internet, switch the server settings to "Open DNS" to avoid this problem.

That's all from me for part 1 of the CyberSAFE Ambassadors Convention! Stay tuned for the next post in which an IT consultant relates how his daughter's friend was kidnapped after some careless Tweets. :-)