如何保護網上個人隱私 How to keep your details safe on the internet
There are no equivalents to highway codes, nutritional guidelines and movie-style ratings systems to help people make safe choices on the internet.
人們要在互聯網上做出安全的選擇，沒有像現實生活中交通法規、營養指南以及電影風格評級制度之類的東西作爲參考。
Many consumers feel hopeless and helpless, as retailers, healthcare providers and governments lose millions of records and hackers steal their identities to make fraudulent transactions. Senior businesspeople may be among the most at risk because of their wealth or because they may have access to commercially sensitive material.
許多消費者感到絕望和無助，因爲零售商、醫療服務提供者及政府丟失了數以百萬計的記錄，而黑客竊取消費者的身份進行欺詐交易。高層商界人士屬於風險最高的人士行列，原因在於他們的財富，或是因爲他們可能有獲得商業敏感材料的途徑。
Current forms of cyber security protection, particularly for individuals, are not keeping up with wily hackers, who are able to change tactics quickly.
當前的網絡安全保護形式（尤其對個人來說）跟不上能夠快速改變策略的狡詐黑客。
Jay Kaplan, chief executive of Synack, a security start-up, says people should prioritise monitoring how their information is being used, because they have to assume it has been stolen by someone.
初創的網絡安全企業Synack首席執行官傑伊慍湓灦(Jay Kaplan)說，人們應該着重監測他們的信息是如何被使用的，因爲他們不得不假定自己的信息已經被別人竊取了。
“It is inevitable,” he says. “Everyone needs to take a stance that eventually their information will be compromised unless they live under a rock and never share electronically. Even then, it is impossible, given they do things such as file tax returns.”
“這是不可避免的，”他說。“每個人都需要認識到，他們的信息終究都會受到危害，除非他們生活在岩石下面，而且從不使用電子方式分享信息。即便這樣，信息泄露也不可能避免，因爲他們要做納稅申報之類的事情。”
Regularly checking your personal credit rating is the best way to keep track of financial fraud, but it is harder to monitor how hackers are using healthcare data or how identification such as social security numbers in the US or national insurance numbers in the UK, that are used to access myriad sensitive accounts, may be being misused.
定期檢查自己的個人信用評級是發現金融欺詐的最好方法，但要監控黑客如何利用醫療數據或者那些用來訪問大量敏感賬戶的身份信息（如美國的社會保障號碼或英國的國民保險號碼）如何被濫用要困難得多。
Mr Kaplan says companies’ and government agencies’ dependence on this form of identification and other easily discoverable identifiers such as names, addresses and dates of birth, is archaic and no longer secure.
卡普蘭說，企業及政府機構對這種身份識別形式以及其他容易被發現的識別信息（如名字、地址和出生日期）的依賴是過時的、不安全的。
He recommends companies come up with a more secure authentication system and that consumers use two-factor authentication, where a password is used in conjunction with another randomly created code, often sent by SMS or generated by an app.
他建議企業使用一種更安全的身份驗證系統，消費者使用雙重身份驗證——密碼與隨機創建的代碼配合使用，後者通常由短信發送或由應用生成。
Vince Steckler, chief executive of Avast, an antivirus software maker for consumers, says people become scared when they see thefts of individuals’ data from companies such as Target and Home Depot, the US retailers. But he adds they really need to worry about how much data they share voluntarily online.
殺毒軟件製造商Avast首席執行官文斯施特克勒(Vince Steckler)說，當看到個人信息被從美國零售商——如Target和家得寶(Home Depot)——那裏被竊取時，人們會感到害怕。但他補充說，人們真正需要擔心的是自己在網上自願分享了多少數據。
“Users probably give far more private information about themselves through their normal use of the internet —Facebook, WhatsApp, just about any kind of app on a phone or computer,” he says. “They give up a massive amount of personal information. The biggest threat to people’s privacy is just the legitimate stuff they are using.”
“用戶在日常使用互聯網（Facebook、WhatsApp等手機或電腦中的任何一款應用）時，提供的私人信息可能還要多得多，”他說，“他們暴露了大量的個人信息。對人們的隱私威脅最大的是他們使用的合法工具。”
Hackers often use publicly available data about people that is on the internet to “socially engineer” contacts, pretending to be someone users know or trust in order to get them to download an attachment or click on an infected link. Or they can use online information on friends and family members to answer the questions that might be used to access password codes.
黑客經常利用在網上可以公開獲得的個人數據來製造社交關係，假裝是用戶認識或者信任的某個人，爲的是讓他們下載一個附件或者點擊一個有病毒的鏈接。或者，他們可以利用一個人的朋友和家人的網上信息回答可能被用於獲取密碼的問題。
“On a public profile, people have where they are born, what university they went to, who their family members are, what city they live in. All that information can be used to get more private pieces of information such as social security numbers, addresses and phone numbers,” Mr Steckler says.
“在公開簡介中，人們透露出自己的出生地、讀過的大學、家庭成員以及所居住的城市。所有這些信息都可以被用於獲取更多的私人信息，如社會保障號碼、家庭地址及電話號碼，”施特克勒說。
People should be aware of what information is available about them online and be suspicious when they receive emails from unknown senders. When clicking through to another site from an email, do not enter personal details as it could be a fake domain. Instead, search for the site on an independent search engine and log in from there.
人們應該瞭解，自己的哪些信息在網上可以查到，並且在收到陌生人發送的郵件時應保持懷疑態度。當從電子郵件中點擊鏈接進入另一個網站時，不要輸入個人詳細信息，因爲該網站可能是一個假冒域名。你要做的是，在另一個獨立搜索引擎上搜索該網站並從那裏登錄。
Senior managers and executives in organisations may be even more at risk, cyber security experts warn, as hackers will presume they have good credit ratings or perhaps access to confidential work files while working remotely.
網絡安全專家警告稱，組織中的高層管理人員可能面臨更大風險，因爲黑客會推測他們有很好的信用評級，或者在遠程工作時可以訪問機密的工作文件。
Tony Anscombe, head of free products at AVG, a security software maker, says consumers need to think about forgoing some convenience in return for better security. When shopping online, he recommends people use the option to check out as a guest to restrict the number of ecommerce sites that store their details.
網絡安全軟件製造商AVG免費產品主管託尼褠斯科姆(Tony Anscombe)說，消費者需要考慮放棄一些便利，以換取更好的安全性。上網購物時，他建議人們使用訪客結賬的選項，以限制電子商務網站存儲他們詳細信息的數量。
“One of the first things I suggest to anyone is you can type in your credit card details each time you make a purchase. It is only a 16 digit number, it is not too complicated,” he says.
“我對所有人的第一個建議是，每次網購，你都要輸入一次自己的信用卡信息。只有16位數字，並不太複雜，”他說。
He adds that consumers should use different email addresses for different purposes, such as shopping and banking, so hackers cannot match an email stolen from an ecommerce website to one from a bank. Emails from more than one address can be directed to the same device, so this should not be too inconvenient, he says.
他補充說，針對不同的目的（如購物和辦理銀行業務），消費者應該使用不同的電子郵件地址，這樣黑客就無法利用從電商網站偷來的電郵去匹配從銀行竊取的電郵。可以從同一款設備發送多個不同地址的電郵，因此，這樣做應該不會太麻煩。
Other basic steps that Mr Anscombe recommends include checking your social media settings to make sure you know what you are sharing, turning off facial recognition so that you do not get tagged in photos without your permission and using different and complex passwords for each account.
安斯科姆建議的其他基本措施包括，檢查你的社交媒體設置，確保自己知道分享的內容；關掉面部識別功能，這樣你就不會在未經自己許可的情況下被在照片中標註出自己的名字；每個賬戶要使用不同且複雜的密碼。
“Every time you write something down that is personal, think: Who is storing it, where is it being stored and why am I sending it to them?” he says.
“你每次寫下涉及個人隱私的信息，都要想一下：誰在存儲它，存儲在哪裏，我爲什麼要發送給他們？”他說。
