Live data from Hacker News

Ask HN: How do I make sure my non-technical parents are safe online?

news.ycombinator.com

131–140 of 215 posts

Re: Ask HN: How do I make sure my non-technical parents are safe online?

#131
post #14

Honestly, while getting phished and hacked are big issues, I would also worry about them being sucked into social media bubbles where they could start latching onto conspiracy theories, fake news, and the like. It was not too long ago where their generation believed it was a bad idea to believe anything on the Internet. I'm not sure what changed. I have seen my own parents fall suspect to that stuff now and then, so…

Damn, I see my mum sharing all sorts of right-wing stuff on social media that is obviously fake news designed to spread virally. People are allowed to hold whatever political views they want, but the stuff she's sharing is obviously designed to enrage and cause itself to be spread.

Re: Ask HN: How do I make sure my non-technical parents are safe online?

#132
This Q has me projecting into the future and thinking how I'd like to be treated and what's likely to mess me up when I am 75... Probably something like getting a virus in my Oculus and not realizing I'm not interacting with reality or something. Lucid dream tests may come in handy at that point...

Anyways, FWIW I've told my mom to always ask to call back if the bank or other financial groups call. And then to either 1) call the number on her physical card or google it and call that number.

Re: Ask HN: How do I make sure my non-technical parents are safe online?

#133
post #14

Honestly, while getting phished and hacked are big issues, I would also worry about them being sucked into social media bubbles where they could start latching onto conspiracy theories, fake news, and the like. It was not too long ago where their generation believed it was a bad idea to believe anything on the Internet. I'm not sure what changed. I have seen my own parents fall suspect to that stuff now and then, so…

It was an earlier generation, but my grandfather, who was a respected scientist in his field, fell victim to "Fox geezer syndrome" in his final years. I have no idea how much money various Fox-adjacent advertisers scammed out of him.

Fortunately, my parents have never had much interest in Facebook, preferring to socialize with real friends in real life. They have their own bubble to some extent, but it's way less toxic than any online version.

Re: Ask HN: How do I make sure my non-technical parents are safe online?

#134
This just almost happened to me and my family. My parents are pushing 70 but still try to keep up with things. My father decides he wants to call PayPal regarding a return request from eBay. I'm in the room and "PayPal" tells him they need to go to a secure line and he needs to download an app. That's really strange I think, but generally scams are from phone calls to you, not you making the call. So I remain skeptical but don't immediately act. They want him to install TeamViewer which is for remote access. I search online to see if PayPal legit does this, nothing comes up. As the obvious over seas person with a thick accent says "oh is this your bank account?" I rip the phone out of my father's hands. End call, turn off data to end TeamViewer session. Need to turn on data to uninstall it (seriously Android?). Then proceed to have him show me where he got the number. He had searched Google for "phone number for PayPal". Somehow, someone got an ad at the top of that list. So he clicked the ad, not realizing that he's not on PayPal's site. Thank God I just happened to be in the room while on vacation (I live in another state now) when this happened, but what to do moving forward? He actually uses a completely separate bank account for PayPal but he still had a lot of money in there.

Re: Ask HN: How do I make sure my non-technical parents are safe online?

#135
post #33

Also tell them about phone scams. Over the last year I have received several very convincing phone calls and voice messages from people pretending to be the IRS or cops. It takes a lot of willpower to convince yourself that they are scams. A lot of scams can be stopped if you consult with someone before sending actual money. I think it's important to tell your parents that before they give anybody any money or accoun…

Last time I was home visiting my parents I was astounded by the number of scam calls they'd get per day . Their landline was basically unusable for incoming calls because 90% of them were scammers. And they're obviously targeting older people who by nature respect/trust authority figures: "This is the IRS!" "This is the police, you're in trouble!" "I'm with Microsoft!" "This is the State Department, we need to talk a…

> The key thing people (not just the elderly) need to understand is that NOBODY LEGITIMATE will make initial contact with you over the phone

My experience has been very different from yours. I've absolutely had financial institutions make unexpected phone calls to me and asking me security questions. In just the last year:

- Someone claiming to be Mastercard phoned me and asked to first verify my name and address. I was 99% sure it was a scam, but I had just enough doubt and curiosity that I called Mastercard back at a known number and it turns out that they were indeed trying to decide whether or not to block a large purchase I had made.

- Someone from the bowels of the check-clearing department of my business bank account called to verify whether or not to pay a large check I'd written to an individual.

- My regular bank called me out of the blue to check on an incoming wire transfer that had my middle initial although my bank account was set up without a middle initial, and they wanted to verify this before accepting the transfer.

In each case above, the call was from a phone number that I didn't recognize (and were un-googleable because they were internal numbers), from a person I didn't know, and the conversation started by them asking me personal or security-related questions! But they were all legitimate calls, and in fact would have caused me grief had I ignored or refused the call.

Financial institutions contribute to the mess by having poor telephone security practices themselves. They also send emails with links they want you to click on to sign in and they invent all sorts of domain names for various services/surveys/emails that bear no relation to their main domain name.

Re: Ask HN: How do I make sure my non-technical parents are safe online?

#136

My recipe is AdBlocks + automated updates enabled + firewall enabled + desktop shortcut for web browser + regular antimalware check. Regarding phishing, I set them up with a GMail account and their filter is quite good against this. So far, not anything bad happened, some minor malware were installed through malicious web browser extensions, but no financial damage or identity theft.

One thing I would like to add: let them set long passwords [0], different ones for each service and write them down in a dedicated notebook. [0]: https://xkcd.com/936/

wouldn't a password manager be better then having them write down/re enter long/complicated passwords?

Re: Ask HN: How do I make sure my non-technical parents are safe online?

#137
I email my mom several times a month with info about the different scams going around. I hear about them all week because I help manage email servers, so we are always changing passwords for people that tell us they were scammed by X, Y, or Z.

The worst right now are the ones offering some kind of rebate or refund, and then a really tricky one where they overpay and have you send money to another "vendor" in the amount of the over-payment.

Elderly people where my wife works are constantly scammed by people telling them they are due for their free cancer screening, or their "grandchild" is asking them for bail money.

Re: Ask HN: How do I make sure my non-technical parents are safe online?

#138

My no. 1 thing is to always install and ad blocker in their browser. uBlock does a pretty good job of getting rid of all the fake download buttons and pop-ups. And tell them explicitly that if their computer tells them they have a virus, they must not try to do anything about it and call you immediately. 99% of the time it's a fake pop-up and they don't want to look stupid so they follow its "friendly instructions" t…

uBlock Origin[1] is a good idea. Not only does it get rid of potentially harmful ads, it also blocks malware/badware websites. I'd recommend enabling all filter lists under "Malware Domains."

Edit: HTTPS everywhere[2] could also help prevent attackers from redirecting you to their fake "You have a virus!" website.

[1]Chrome: https://chrome.google.com/webstore/detail/ublock-origin/cjpa... Firefox: https://addons.mozilla.org/en-US/firefox/addon/ublock-origin...

[2]https://www.eff.org/https-everywhere

Re: Ask HN: How do I make sure my non-technical parents are safe online?

#139
Fakeblock works really well for this kind of stuff. It's a super nifty service that a whiz kid from the Bay came up with. They are going to get invested by the search campus up north soon. It uses state of the art privacy technology and will also be used as part of the new wall proposal that's going through congress. It should be able to protect against almost any kind of cyber attacks.

Re: Ask HN: How do I make sure my non-technical parents are safe online?

#140
post #119

Thankfully, my parents were technical back in the days of BASIC & CP/M. So basically it comes down to making sure that the UI/UX they (and I tbh) like sticks over updates. As such, we've moved completely away from Firefox to Palemoon (with a "classical" theme), from Office & OpenOffice to LibreOffice, and to minimalist Windows theming to keep it looking like, well, Windows. I use either uBlock or Adblock Latitude & G…

If you have uBlock Origin[1] you don't need Aaklist, Disconnect or Ghostery. Even with it's default settings, uBlock Origin will circumvent anti-adblock and will block more tracking then Disconnect and Ghostery combined.

In uBlock Origin's settings, I recommend enabling all filter lists under "Malware Domains" to block malware & scam websites.

[1]Chrome: https://chrome.google.com/webstore/detail/ublock-origin/cjpa... Firefox: https://addons.mozilla.org/en-US/firefox/addon/ublock-origin...

I believe uBlock Origin can be installed for Palemoon as well.

Post reply on HN