Google asks: where do you go for help with staying safe online?

Hi Vynor – all guest convos include the italicised note at the end. It’s just a reminder that Convo publishes opinion pieces from guest authors, but Which? doesn’t necessarily agree with all of these opinions or all of the guests 🙂

I hope to share a link to the online resources we’ve collated soon

@Lauren, Hello – I’ve had quite a good day today so cannot blame the grumps for my comment. The Convo begins “ Which? and Google have partnered up to deliver free training to help people stay safe online.” So I would have thought as you are partners you would have debated and then agreed with what is being said. If you don’t agree with Ronan then Which? perhaps should not be a partner to this. 🙂

Without the disclaimer, I expect some hypercritical contributor would be in there criticising Which? for working with a commercial organisation.

Sorry Malcolm, I missed your comment as I’m @ldeitz 🙂 haven’t had the chance to meet @lauren, but she beat me to the username!

I’m not sure what you mean with regards to debating the issue – we often invite guests to come and write about issues that we’re both working on, that may be an MP who is supporting our campaigns or even CEOs who are taking action on consumer issues. We’re participating in the discussion here on Convo, so I’m not sure that it would be necessary for us to outline positions in the convo that’s been written by Ronan.

@ldeitz, I should have known better. Sorry Lauren Deitz 🙂 I was suggesting that as this intro begins “Which? and Google have partnered up” that you were both in agreement on the topic and should therefore share the views expressed by Ronan. Otherwise why enter into a partnership?

I understand the disclaimer being used when you have a guest contributor who is speaking solely on their own behalf.
🙂

I see. I suppose the opening is to scene set and explain why we’ve invited Google to come and share the news.

At the risk of grinding this point to a fine dust, I think there is a contradiction between an article written by a partner with Which? in a project and a disclaimer statement that says “all views expressed here are . . . not necessarily . . . shared by Which?“. The disclaimer could have been omitted in this instance.

I’ve tweaked the disclaimer 🙂

Question – do you know of anyone who might benefit from a masterclass on staying safe online? Are there any particular risks/benefits you would like to highlight? Have you ever helped out a friend, neighbour or family member with getting on a computer?

I helped my gran when she was still alive and the biggest problem initially was the mouse-pointer coordination. My grandpa on the other hand was a whizz on computers up until he was 93 – phone scams were another thing altogether.

I’d have thought – being in the business they are – they’d be running online courses.

A fair point, Derek – I hope to be able to share the online resources with your very soon 🙂

Hi @carneades, Google and lots of others already have tonnes of content online about staying safe but as this partnership grows, we hope to turn our course into an online module but in the meantime, we will be able to share a copy of the course syllabus and content. We are just waiting on some updates to our partnership landing page, and it will be available from there. I’ll make sure to come back and update this convo when it’s live.

Thank you, Tom.

I’m sure Google really do want to help folk stay safe online, because they cannot make money out of folk who don’t or can’t go online.

I think Google have helped to date is by producing ChromeBooks as an alternative to virus-prone Windows PCs. However, I don’t use any Chromebooks myself, so I cannot personally vouch for their merit.

Google are also responsible for Andriod, which is now the most widely used OS for tablets and smart phones. Personally, I find Android hard to use for serious internet usage. I’ve also seen more than a few instances of folk falling victim to shyster sites via Android, so it may be that a good way to stay safe online is to avoid the use of Android devices, if and when it is possible to do so.

We can also apply the ERICPD safety measure hierarchy to internet safety:

Eliminate: Follow the example set by the the young John Connor in the Terminator movies. Don’t use the internet at all. Confine your commerce to cash transactions and your social networking to the pub.

Reduce: Limit your use of the internet – and try to avoid any form of e-commerce (i.e. banking, shopping, etc). (Posting on Which? Convo will probably be reasonably safe though…)

Isolate: Use different computers for different on-line activities. (Computer experts know that there is no such thing as having too many home computers.) So, if you must engage in e-commerce, consider using one PC for that and another one for general surfing. You may also want to set up different user accounts and different browser programs (e.g. with different levels of security extensions/add-ons) for different activities. And, if you must insist on using a Windows PC, try not to do any (or most or all) of your on-line activities from an account that has Administrator rights.

Control: Make sure you keep your computers and software up to date with security updates etc. Also make sure that you have diverse multiple backups for any precious data that you own.

Protection: if you must insist on using a Windows PC, make sure that you have the best security software that you can afford. Apple, Android and Linux users should also consider the need for appropriate security software.

Discipline: Exercise due caution before giving out personal data or financial data to internet sites that “require you to register”. Try to use different passwords for different sites, otherwise, if one site gets hacked, the hackers may be able to use the password you used there to log into many of your other accounts. Remember, if a deal sounds too good to be true, there is probably a hidden catch that you have not spotted.

Hi @derekp,

The course is actually platform neutral. So whilst we discuss some Google products, we also discuss products from Microsoft, Apple and a whole host of other suppliers. You can see the full syllabus which is available for download here; http://explore.which.co.uk/docs/which_google_stay_safe_online.pdf

Thanks,
Tom

Tom: If I may, I’d point out a potentially serious error in the guide. With regard to ransomware it states “The best defence is to keep a backup of all your files on an external hard drive, rendering the threats empty. However, as I’m sure you’re aware, almost all ransomware lies dormant initially, while the program searches the networks for attached drives.

So unless your files were kept on a air-gapped drive, they would be compromised. I note that the same advice is also repeated n the summary.

I’d also take issue with your comment that “Macs are increasingly falling victim to ransomware attacks”. Isn’t it true that there are no recorded successful ransomware attacks on Macs and that it’s in fact only security researchers who have demonstrated that it’s theoretically possible? Not saying it won’t happen, certainly, but I suspect the comment in the guide is somewhat inaccurate.

I’m going to be a bore, but in the section about passwords you provide advice making your passwords complex with the addition of non-alphanumeric characters and symbols. But in fact all the evidence shows that a simple three word-dissociated phrase – such as “steakmudbannisters” – will defy brute force attacks better and is easier to remember than using non-alphanumeric symbols.

It might also be important to point out that almost all password ‘hacks’ are, in fact, the result of mass data thefts and not, despite what the media would like us to believe, the result of a bespectacled teenage hacker, late at night.

Hope you won’t mind me mentioning this.

Thanks @carneades. All of the content and also the course itself was designed in conjunction with the Which? computing team including the computing helpdesk. The idea of it is to give practical simple tips and advice to people who do not have your technical knowledge.

Also, whether Macs have been subject to a successful attack or not, the risk is increasing, with a number of new programs being designed to attack Macs.

I agree, Tom. But my point was that the sentence “Macs are increasingly falling victim to ransomware attacks” was clearly incorrect. I suppose my concern is that if information in the guide makes statements which are inaccurate in one aspect, it’s bound to make the newcomer wonder how accurate the remainder of the content is.

I agree with Ian here.

Whenever I see anything posted I that know to be untrue, it certainly makes me wonder how much other material from the same source is also untrue.

Further to the link that Tom posted above, I did download and read the syllabus, so I am content that most of it does seem to be well though out and presented.

As a producer of training material myself, I know that is hard work to produce materials that are both clear and simple. I also acknowledge that, depending on the target audience, it can be useful to simplify statements to the point where they are no longer 100% true.

Quite often there will be “exceptions that prove the rule”, but sometimes those are best excluded, if the training needs to be short and simple.

For example, we might tell people: “Don’t use Windows XP for internet browsing, it won’t be safe, because it is no longer supported.” Having said that, I have a brother who is a director of consultancy at leading IT firm and who still uses XP for his personal internal access. Since he is an expert, it is safe for him to use XP, because he really does know what he’s doing.

Things are changing fast Ian even Linux is getting hacked , no help from our “good ” security services here and in the USA.