Safety and ethics

Содержание и основные понятия

Back to the table of contents
Alterna · Chapter 4 · page 4.4
Safety and ethics
The Internet is not only knowledge and communication, but also threats. A weak password, a phishing letter, a carelessly published photo -- and now your data is in the hands of fraudsters. But the Internet is also a place where people live. And like any society, there are rules of behaviour here. On this page, you will learn to protect yourself and respect others.
In chapter 3, you've already learned what it is.
Fisching
(fake e-mails that launder passwords) and why important
Change plant passwords
Wi-Fi-rooters, you also found out that
HTTPS
encrypts data and that there is a law
152-FZ
This is where you deepen this knowledge and add new skills.
GEF requires:
"to choose safe online behaviour strategies, to adhere to network etiquette, basic standards of information ethics"
And the PIF at a deeper level adds:
"to protect personal information, understand network anonymity, digital footprint, hazard code"
.
GEF · Basic
PLF · Infred
01
Passwords: First line of defence
Why "123456" is the worst password in the world and how to create a reliable one.
GEF
What's a password?
Password
- a secret line of symbols that confirms that you are you.
authentication
(Personal checks) on the Internet.
How are the passwords hacked?
Brute force
- The program oversells all possible combinations.
123456
It breaks in in milliseconds.
Vocabulary attack
The words from the dictionary are broken first.
Fishing
- fraudsters create a fake website that looks real, and you enter the password yourself.
Database leaks
- if the site is hacked, users' passwords go online. - If you use the same password anywhere, they'll hack all the accounts.
How to create a reliable password?
Length
The longer it is, the harder it is to break.
Diversity
- capital letters and lower case letters, numbers, special symbols (!!@#%).
Unpredictability
- don't use names, dates of birth, words from a dictionary.
Unique
- Different passwords for different sites. If one is hacked, the others are safe.
The password phrase method
Take a sentence that is easy to remember:
"My cat Murzik likes to sleep on the windowsill in winter!"
- and reduce to first letters + numbers and symbols:
МкМлснпз2025!
Long, varied, unpredictable — and you'll remember easily.
The password managers
It's impossible to remember unique passwords for 50+ sites.
password managers
- programs that store all passwords in encrypted form.
main password
(from manager) and the rest are automatically set up.
Examples: KeePass (free, open code), Bitwarden, 1Passeword.
🔐
Checking password reliability
Enter password · see its strength
Interactor
Enter the password, and the simulator will evaluate its reliability by five criteria. Don't worry, the password doesn't go to the server, the test takes place locally in the browser.
Enter password
○
At least 12 characters
○
Letters (a-z)
○
Capital letters (A-Z)
○
Figures (0-9)
○
Special features (@#%)
02
Two-factor authentication (2FA)
One password isn't enough.
GEF
PIF
What's 2FA?
Two-factor authentication
- a method of verification in which identity must be confirmed
in two ways
:
Something you know.
- password, PIN code.
Something you have.
- telephone (SMS code), authentication app, USB key.
How does it work?
When you enter a new device account:
Enter the log and password (first factor).
The server sends the code to your phone (second factor).
You enter the code, and then you get access.
Why does it matter?
Even if the fraudster finds out your password (through phishing or leaking), he won't be able to enter without your phone. 2FA is one of the most effective protections against hacking.
Where do you turn on 2FA?
Make sure to include a two-factor authentication for:
E-mail (Google, Yandex, Mail.ru).
Social media (VK, Telegram).
State services and banking applications.
Cloud Warehouses (Jandex Disk, Google Drive).
03
Fishing and social engineering
Fraudsters don't attack computers; they attack people.
GEF
PIF
What's phishing?
Fishing
(from fishing) is a type of fraud in which the intruders send fake letters, messages, or fake sites to lure passwords, card numbers, or personal data.
How do you recognize phishing?
Falsified sender address
- The letter came from the address.
support@g00gle.com
For
support@google.com
.
Urgentity and threats
- "Your account will be deleted in 24 hours unless you confirm the data!"
Fake links
- a link looks like
google.com
but leads to
g00gle.com
or
login-google.ru
.
Request for personal data
- The bank never asks for a password or a CVV code on email.
Errors
- misprints, weird design, low-quality logo.
Fishing Example
You get a letter saying, "Dear client, your VKontakte account is blocked. To unblock, cross the link and enter the password."
Looks like
Like VKontakte, but address--
vk-login.ru
(not
vk.com
If you enter the password, they'll steal it.
Social engineering
Social engineering
- Manipulating people to give out information or do things themselves.
Texting
- The fraudster is represented by a bank officer, police officer, technical support.
Qui about qua
- "I'm from IT, I need your password to update the system."
Expensive
"You won the iPhone!
Rule 3 "STOP"
If you're asked to enter the password, the cards or transfer the money:
STOP
- Don't act immediately.
VERIFICATION
- call the organization by official number (not by letter).
COMMUNICATIONS
- tell your parents, teachers, or technical support.
🎣
Fishing detector
Find six red flags. Press the suspicious places.
Interactor
You have a fake letter in front of you, find all the signs of the phishing, press the suspicious elements of the letter, there are six red flags hidden in the letter.
From:
support@g00gle-security.com
Theme:
Your account will be deleted in 24 hours!
To whom:
user@mail.ru
Dear client!
We found it.
Suspicious activity
Your account will be in Google.
deleted in 24 hours.
If you don't confirm your data.
To restore access, cross the link:
http://accounts-google-verify.ru/login?confirm=true
If you don't confirm the data, your account will be
Locked forever
and all data will be deleted.
Enter your password, phone number, and the last four digits of the bank card for_verification.
© 2025 Google LLC. 1600 Amphitheatre Parkway, Mountain View, CA 94043
This letter was sent to your address because you're registered to Google. To refuse subscription, please cross the link.
Flags found:
0
/ 6
04
Personal data protection
What's a digital trail and why you can't publish everything.
GEF
PIF
What is personal data?
Personal data
- Any information that relates to you personally:
FIO, date of birth, address.
Phone number, e-mail.
Photo, video, voice.
Place of study, work.
Passport number, SNIL (for adults).
Law 152-FZ
It works in Russia
Federal Act No. 152-FZ on Personal Data
It requires:
Consent to personal data processing (you tick on the sites).
Storage of Russian citizens ' data on Russian territory.
Rights to demand the removal of their data.
Relationship