From The Guardian of the UK
This shines a spotlight on the issue of 'session cookies' and how a hacker, if they manage to get hold of them, can hijack your various accounts. They explain how this can happen.
At the end of the article, they give some advice on security, which I have reproduced here, below. Some simple measures - such as making sure you actually log out of the account at the end of the session - can reduce the risk considerably.
Do not use insecure public wifi for sites that require you to log in. The chance of cookies being stolen through this channel is low, but you should always be cautious.
Get into the habit of logging out of accounts. “Just closing a tab doesn’t end the session,” says Briedis. ”You need to manually log out to invalidate that cookie and make it useless to a thief.”
He suggests moving passwords out of your browser and into a dedicated password manager.
Clearing your cookies regularly will reduce what’s available to be stolen.
If you suspect you have been compromised, run an antivirus scan. Also log out of your accounts on every device and change your passwords.
Use MFA on accounts [Multi-Factor Authentication], as it does still offer more protection than a simple password.
Alert your bank if you notice any suspicious payments.
No comments:
Post a Comment