About this blog

Bob Sullivan

Corporate sneakiness. Government waste. Technology run amok. Outright scams. The Red Tape Chronicles is MSNBC.com's effort to unmask these 21st Century headaches and offer real solutions that save you time and money.

Bob Sullivan covers Internet scams and consumer fraud for MSNBC.com. He is the winner of multiple journalism awards for his coverage of online crime and author of Gotcha Capitalism: How Hidden Fees Rip You Off Every Day and What You Can Do About It. and Your Evil Twin: Behind the Identity Theft Epidemic.

Got some red tape you want Bob to untangle? Write BobSullivan@
feedback.msnbc.com.

ID thieves' new hangout: file-sharing software

Posted: Tuesday, November 13 at 05:00 am CT by Bob Sullivan

Josephine made about $37,000 in 2004, but thanks to itemized deductions, she only paid taxes on $26,000. The Midwestern bookkeeper ended up getting a $1,000 refund, which was deposited into her account at a local credit union.

She never intended for the whole world to know this.

But a brief foray onto the file sharing network Limewire exposed her tax return to millions of Web users, who could find it as easily as you can find movie times on Google.

Josephine’s tax return was apparently pilfered, stored by someone else, and shared anew on Limewire recently. With just a few seconds of searching, an MSNBC.com reporter found intimate details of Josephine’s life -- how much she paid in property taxes, her Social Security Number, even her bank account number.

Josephine (whose name has been changed to protect her privacy from further violation) didn't want to talk about it when contacted, saying only that she "may have used it (Limewire) in the past." She also said she was unaware her identity had been stolen.

She's hardly alone. In recent months, researchers, congressional aides, and journalists have pulled off the parlor trick of finding consumers' tax returns on file-swapping services.

The peer-to-peer services, descendants of Napster, have worked to attain a level of legitimacy in the face of music-industry lawsuits, but most remain active haunts of those looking to download free music and videos. But when swappers incorrectly install the software, they can share everything on their computers. Tax returns, generated by automated tax software, are an easy target. Credit card numbers, personnel files, and even sensitive military documents also have turned up.

'Actively looking'
Chris Gormley, chief operating officer of the Tiversa security firm, has a message of all P2P users: These are no longer mere parlor tricks. Criminals are now well aware that Limewire and its competitors are a treasure trove of personal information. They now actively exploit the services every day.

"These aren't for entertainment," Gormley said. "These are people who are actively looking for this stuff.”

Tiversa gets paid to search P2P networks for sensitive corporate information that might be left there by careless employees. Recently, the company began cataloging all search terms entered into the services by would-be downloaders. The presence of identity thieves was obvious. On Sept. 14, the first day of checking, Tiversa charted 2,314 searches for "credit card" and 8,303 searches for "passport." Criminals also ran searches for medical information (5,767), retirement-related documents (4,064), Quickbooks or Quicken files (about 6,000) and even audits (several hundred). Then there were vague searches for words like account, loan, confidential, log in, or proposal.

The most common search term also was the most obvious: "bank." Tiversa found 106,000 searches for that word alone.

Criminals have only piled on since then. By the end of September, there were twice many searches for "account" and "credit card." There were three times as many searches for “ATM.”

By the end of October, the cumulative effect of these searches had become enormous. Tiversa picked up about 300,000 searches for credit cards, 440,000 for medical information, 650,000 for retirement-related documents, and 7.5 million for bank documents.

The person behind many of those 7.5 million searches is most likely a criminal planning to turn that downloaded data into money.

Worse than phishing
Falling for faulty peer-to-peer software is a much more severe problem than falling for other traditional identity theft tricks like phishing e-mails, Gormley said. When a consumer fills out a fake Bank of America message, the criminal will probably only get account data and perhaps a PIN code. But when a criminal can root around a consumers' hard drive, the stolen data haul is much more valuable. Combine that exposure with the refined search capabilities of software-sharing tools like Limewire, and these networks become the perfect accomplice for identity thieves, Gormley said.

"This is just like someone looking at your computer (in your house)," he said. "They're getting a lot more information than a phishing attack."

With an estimated 10 million to 12 million people using file sharing networks at any given time, and perhaps 60 million users total in the U.S. according to the Federal Trade Commission, identity thieves are shooting fish in a barrel.

One man who apparently shot a few fish was Gregory Kopiloff of Seattle, who pleaded guilty earlier this month to just the kind of crime Gormley is warning about. Kopiloff, who faces up to 20 years in prison, admitted using Limewire to download tax returns, credit reports, student loan applications and other files with personal information. He also admitted to stealing $73,000 from 50 victims.

Secret government files
Earlier this year, Tiversa CEO Robert Boback testified before a House committee that the stakes with file-sharing software data theft are even higher. He said company researchers had found nearly 200 secret government files on Limewire.

The company would not divulge the contents of the files, citing national security reasons. Boback would say only that they were "highly classified – clearly marked ‘secret’ or above -- government documents from the U.S. and others."

Careless music-seeking teenagers are usually blamed for Limewire file exposures. They install file-swapping software and steal their music, not giving a thought to their parents' Quicken files and tax returns.

But this stereotype isn't necessarily accurate. Josephine is an adult who installed the software herself. A second tax return found on the service belonged to couple in their early 20s living near Baltimore. The husband served in the U.S. military. With no kids to blame, it's likely they installed Limewire on their own. Attempts to reach the couple were unsuccessful.

Much as embarrassing MySpace and Facebook photos now haunt job-seeking young adults, the appearance of the Baltimore couple’s tax return suggests there may be a new class of P2P identity theft victims: recent teens who have graduated from illegal file-swapping to adulthood, but who haven't counted on the privacy implications of their downloads.

RED TAPE WRESTLING TIPS
It's critical to understand exactly how every file-swapping program works. Here's the simple, broad view. It you can download files from someone else's computer, they can download from yours. Behave accordingly.
TOXIC: Every file-sharing program should be treated as toxic, and in fact, many antivirus programs do just that. Make sure your antivirus software detects and disables unwanted file sharing programs. You’re better off not using them.
FIREWALLS: Some P2P software won't work, or won't work well, when your firewall is turned on. So a user might turn the firewall off to download files. This is playing with fire. What are the odds you'll start watching that stolen movie and forget to turn the firewall back on?
USER ACCOUNTS FOR KIDS: Symantec's Jody Gibney offers this tip to parents who are worried about their technically proficient children: The Windows operating system allows separate user accounts for children and parents. Use them. That way, if your child accidentally shares his "My Documents" folder (the most common P2P pitfall), he or she won’t be sharing your documents. Remember, Windows creates separate My Documents folders for each account. Of course, this isn't foolproof. If your child chooses to share your entire hard drive, you'll still have a big problem. But user accounts will help.
PASSWORD-PROTECTION: It will also help to separately password-protect your security software so your kids don't disable your firewall or antivirus protection, Gibney said.
IF YOU MUST: Those who are using file-swapping software need to pay special attention during installation to understand what part of their computer is being shared with the universe. Limewire and other software makers are making strides at changing the default settings so the software is less promiscuous. Limewire users now, by default, expose only a "shared" folder if they accept all default choices. That generally means you’ll only share files you’ve downloaded from Limewire. Still, it's easy to change that setting and land in a heap of trouble.
REALLY SHUT IT DOWN: Limewire also has a tricky feature that confuses many users into thinking they're turned the software off when they haven't. Clicking the "X" in the software's upper right-hand corner doesn’t shut down the software, it merely minimizes it. That’s foreign behavior to most software users, who click the X to close every other program they use. To really turn Limewire off, you've got to right-click the icon at the bottom of the computer and select "exit." This no doubt leads to a lot of users sharing more files than they intended.
DO YOU NEED THOSE FILES? It's also important for consumers to realize how many sensitive documents they store on their computer and act accordingly. Software like TurboTax and Quicken creates many files that would be a gold mine to ID thieves. These must be carefully stored, ideally with additional password protection. You never know who might glance at your computer some day through some new Internet theft technique, or when you'll have to call a service technician for help. Destroying files that are no longer needed is also a good habit. Why take the risk? And you probably have to expand your idea of what's a sensitive file, too. In addition to the kind of items consumers generally think of secret, such as tax returns, Gormley said, criminals now regularly look for spreadsheets from work, retirement information, health records, and so on. He's seen some horror stories.
"Consumers' hard drives are full of things like psychiatric records, things you really wouldn't want anyone to see," he said.

MAIN PAGE NEXT POST EBay, Tiffany fight over fakes

Email this EMAIL THIS

91 COMMENTS

Its not limewire's fault someone doesnt know how to install software. This is just another hit of negative feedback towards a p2p program so they can try to shutdown the network. Its not going to happen. People need to realize P2P is here and if you close limewire another one will open.

If you want to keep your tax returns for reference sake, burn them to a CD (or two) and then delete them from your hard drive.

Then why the hell did Microsoft put Napster into its version 11 of Media Player? To give everyone a security problem?

Microsoft knows this happens and when it comes to safe, reliable and secure software, they do nothing!

Great article !
One way of keeping sensitive information separate and not at all available for sharing on your computer would be using a portable Hard Drive to save that kind of information . One with a simple USB plug in would be extremely easy to use , and keep sensitive information completely unavailable for sharing..
Thanks for "sharing" this information
Swannie

lol This only happens if you're a complete dunce and decide to share your entire mydocuments or c: drive. You can choose which folders you want to share.

But they're right. If you can't figure that out (and an 8 year old could) then stay off of P2P or better yet stay off of your computer :)

Giving someone you don't know any kind of access to your computer certainly seems to be one of the dumbest things a person can do. You spend all this money to make yourself invisible on the internet, only to open yourself up to any any nitwit, including those with nothing short of malice in their hearts.

"Every file-sharing program should be treated as toxic"

Oh please. It's not all that difficult to NOT share your financial history. For people who just install programs never bothering to learn the first thing about them almost everything is "toxic".

Also there are many progs that require you to exit through the tray icon, that's not some trick.

I use P2P sharing, and have for sometimes. I think it can be used properly if people set it up right. It is not the software it is the people using it. Just make sure you have some very good virus protection.

That is why I use two computers, one I use daily and one that is dedicated to a P2P connection with absolutely no personal information on the drive. Fact is I do not have any software other than lime wire and the OS running on the P2P system. The P2P system was a very cheap computer that I picked up for under $300.

What really needs to be emphasized here is the IF YOU MUST paragraph. If you are stupid enough to share your whole hard drive or your documents folder where you have private information, then you deserve what you get.

Several years ago I purchased a used computer at a swap meet and there was no OS on the hard drive so the system would not boot. Out of curiosity I took the drive out of the system and installed the drive in another computer.

On that disk drive I found the tax returns of 200 people. The computer used to be owned by a lawyer who did tax returns. I knew the name of the lawyer and his address along with his personal information. I also knew the names, addresses, and personal information of many of his clients. I had bank account information, SSN's, and in some cases drivers license numbers. I knew what vehicles they had purchased that year, I knew their medical expenses and in some cases their doctors name.

I called the lawyer and told him I had the information. He asked that I erase the information. I did.

I think erasing the information was a mistake. I should have contacted all his clients and told the clients. What the lawyer did with their data was inexcusable. The clients should have known about the lawyers mistake and taken legal action against the lawyer.

Be very careful with your data. When you get rid of an old computer wipe the disk drive completely with one of many utilities designed for such use. Simply deleting the files is not good enough. The physical media must be rewritten many times to remove all traces. If you are really paranoid, remove the disk drive and physically destroy the disk drive.

It all goes back to the user. If you are not sure what you are doing, don't do it. You need to be computer savvy, know whats being used and done with your computer and make sure any personal and sensitive information stored on your computer is password protected. There are too many thieves in this world and the cyber world is no different.

And if you don't want to install Linewire, just use Google: http://www.securityfocus.com/columnists/224

All file sharing programs should be treated as toxic in the same way that all bottle, cans, jugs and cartons should be, if you're stupid enough to NOT READ THE LABEL. This article completely buried the point that you're only at risk if you have file sharing programs installed and don't know about it or don't know how to limit the files share in a program you do use. If you're stupid enough to share your whole documents folder or C drive, you shouldn't be using the Internet. This article should have put that point right up front, instead of making it seem like programs like Limewire are the problem instead of the users.

I have to agree with everyone here that makes the statement that you'd have to be pretty ignorant to share your personal documents. All file sharing software allows you to select where shareable files are and where to drop files you are downloading. Smart people create a folder specifically for their "traffic" and that's it.

Its not Limewires fault people are reatarded, if you dont want your personal information on Limewire then dont share your whole harddrive you dipshit!

This is just a pathetic excuse to try and destroy the whole p2p program. ITS NOT LIMEWIRE! limewire doesn't just automatically upload info onto the network, the only way that would work is if some retard puts their info such as SSN or bank account #'s into the sharing folder. JUST DONT PUT IT IN THERE AND IT WILL BE FINE!!

This article makes me glad that I don’t conduct any kind of business online and that I don’t store sensitive information on my computer. My friends get after me for being “old fashioned” because I fill out the paper forms for my taxes, do my banking in person, and write paper checks to pay bills. They always tell me that “online is the safest way to go,” but I have never believed that anytime information is sent out on the internet or is stored on an internet-accessible computer that it is as safe as if I handle it myself. This article gives me some proof.

This is just a pathetic excuse to try and destroy the whole p2p program. ITS NOT LIMEWIRE! limewire doesn't just automatically upload info onto the network, the only way that would work is if some retard puts their info such as SSN or bank account #'s into the sharing folder. JUST DONT PUT IT IN THERE AND IT WILL BE FINE!!

If you read the article, no one is blaming Limewire or other P2P applications. The article simple states - accurately so - that these applications are facilitators for ID Theft. Caveat emptor or else your cajones will be in the frying pan if the wrong people find your personal information!

How silly can most of you people get? I mean really, 'just know how to use a p2p sharing program'? GET REAL!!! you have to go through so many steps to TRULY get the stupid program to shut down, and kids don't think twice to the fact that ISP's like comcast are helping prosecute illegal downloads and copyright infrindgement. The cost is usually around $700 PER DOWNLOAD(do the math on say 400 MP3's?!?!?!), or downloading movies(I know of a person that this actually happened to) and recieve a email saying they[comcast] will be closing his account and possible litigation may happen. People, stop being so CHEAP and pay the .99 cents from REPUTABLE SITES(sony, yahoo, etc.) and OWN THE SONG, or pay up to $25 for a stupid DVD!! If you don't know how to protect your computer because the kids want music get online and google.com, or ask.com, or whatever you need to do to get educated!! The above mentioned costs are SO CHEAP compared to the alternative of your credit, life, and so much more being shared on the internet!!

Keep your data in a separate partition on your hard drive or on a second hard drive and do not share it. This is also good practice for recovery situations.

Dan, you're not real up on things, huh? Napster hasn't been a p2p program for about six years. It's now a pay subscription service.

I agree. Keeping sensitive information on an external hard drive is key! Why take the chance?

You know, this situation is no different than that of people who take questionable photos of themselves and then keep them on their computer or post them on "MySpace", and then wonder how the heck they got out onto the internet. C'mon people, if you don't want information shared with other people....then don't put it out there in the first place! The majority of people are just so careless nowadays that they just don't stop and think when it comes to sensitive information. Burn it on a cd or put it on a flash drive. It literally takes just seconds and can save you a ton of problems!

So many comments from high and mighty readers. Please remember the audience of this site. This article was written for the people that do share their entire hard drive. Thieves pray on the weak and others attempt to protect the weak from predators with information.

The "Napster" that is in WMP is not a P2P. It's a legit song service now. Napster was the original P2P sharing network that got all of this started.

Don't blame anything other than the user. If you are going to use a computer it is in your best interest to know what you are doing. It is a computer, not some piece of simple media hardware. Users need to at least TRY to understand what they doing, otherwise don't use one. Limewire gives you the option to NOT SHARE your files. You just have to pay attention during the installation. A test should be required prior to the purchase of a computer.

I'm sorry but you posters telling people they must be computer savvy and "if you share your MyDocuments folder you deserve what you get" is just plain nonsense. What percentage of the computer users out there are really "computer savvy" - or even realize that they are literally posting part of their hard drive on a huge billboard in front of a crowd of millions by just installing Limewire? You can't possibly fault the vast majority of users who are used to just installing sofware with the defaults and knowing that "it works". You'd have to be an idiot not to know that ID theives ARE computer savvy and will exploit any means possible to pry their way into computers to steal information. The fact is, file sharing software opens a gaping hole in the security of your "personal" computer. Imagine a close friend or relative that may not be as "savvy" as yourself gettin hacked because of that hole. Would you scold them after the fact because they didn't know how to set it up properly? I'm sure that would make them (and yourself) feel a whole lot better.

Let's face facts people: The attraction for file sharing software is the notion that you can get copywritten material for free. With the morality of that concept completely aside, and knowing that you intentionally compromise the security of your computer by installing the sofware, you have to ask yourself, "is it really worth it?"

You're stupid to install something like this on your PC. The only safe way to use this type of program is to install it on a special hard drive used only for this purpose. I used Kazaa for a while. I would remove my real hard drive and install a special hard drive which contained Windows, the Kazaa software, and NO PERSONAL FILES OF ANY TYPE. And if you get a virus, you wipe that HD and restore it from a backup CD.

Stop blaming on the P2P softwares.... Blame on the people who DONT know how to use the softwares.

Limewire also allows you to change the settings of EVERYTHING even AFTER the install is complete, including which files you wnat to share if any...this is NOT rocket science.

It's no one's fault but the people that have too much time on their hands and decide to steal from others.

dear friends:

The way to make money in the world and the fastest is to turn in every independent, self employed, .com.org that is working, sidelining, making crafts to the IRS IN AMERICA. ALL THOSE OPPERATING ON THE INTERNET AND IN OTHER NATIONS AND SELLING IN AND OR TO THE USA ARE TO REPORT INCOME. PROSITUTES, DRUG DEALERS REPORT THEM ALL INCLUDING BABYSITTERS. EVEN IRANIANS CAN DO THIS AND MAKE A PERCENTAGE OF TEH INCOME

I'm the guy who uses two computers. I'm weighing in again. I service computers and know many users that just think the software will do everything for them. In my experience, people are lazy, or don't care, or don't know what they are doing. I would put that number around 80% of those who use computers. Even though I am savy, I decided to be double safe and only use a computer that is dedicated to the use. It was cheap and easy and I sleep well at night because I know no-one is farming info off that computer other than files I want to share.

Why would someone keep important records on a p2p website? And why would some idiots in the government do it with secret files? At best those sites are just meant "hanging out". At worst they are the new slime pits of the internet. I never go there, and all my real important files are on CD, not even ON my computer. Id crooks should be jailed as just because something is available, doesn't mean you have the right to steal it and rob people.

stealing music is no different than the thieves stealing your info. Your both criminals.

instead of blaming someone for allowing there personal info to be viewed, it hapens more than you think. The bigger question is what are you doing to make sure that you info is secure, and that no one else has access to it, and what are you going to do when you do find out that someone has accesed your information, and started to use it. You say it's not Limewire's fault for allowing personal information to be seen, then who is at fault?? Many companies are scammed everyday, TJ Max is considered to be the largest security breach with over 94 million accouts compromised, is one of those accounts yours??
Most people don't think that file sharing, hacking or security breaches are a big deal, try explaning that to the people who are in the nightmare of having someone else using there identity's and they can't stop them, there lives are a constant termoil because of what someone else has done. If you are really serouis about learning how to protect your self, www.prepaidlegal.com/hub/brettferguson

This is a good article, but Bob overlooked a simple and effective security procedure that's built into Windows XP. Right-click on a folder, select Properties from the short-cut menu, then click on the Advanced button.
The bottom half of the "Advanced Attributes" dialog includes "Encrypt contents to secure data". Clicking this checkbox uses the "Encrypting File System" built into XP to secure the contents of the folder. (Encrypted folders are displayed in a green font in Explorer.)
Only the person who logged into the computer can view the contents of the folder. This means you can secure "My Documents" from everyone but yourself.
Obviously, kids should have a different account than the parents. If everyone in the household uses the same account, the contents may be exposed through P2P software.

I dont think that blaming the computer user for installing software,sharing their documnets and calling them "Stupid" is fair. Some Families only own one computer that everyone in the household uses. Parents may not know that their kids installed P2P software on their PC. The problem is also NOT with the P2P program. The problem is that there are too many hackers out there trying to obtain information, inventing new viruses, or scamming people out of money. Thats it in a nutshell. No matter what you do to protect yourself, there is going to be some hacker out there that is going to find his way around security blocks.

Why is this exactlly "new"? File sharing have been used by hackers & ID thieves for years.

What a terrible article! Its obviously biased author is just trying to scare people away from using p2p filesharing programs when in actuality its very easy to manage which files you share (and thus which files are available for other people to get).

Most of you folks seem to really trust the authors of the P2P programs. LOL.

Who is the "dear friends" guy? How bout posting a comment that has something to do with the subject?

The bottom line is: The general population of computer users should be warned against using Limewire for a number of reasons. Even if you consider "sharing" of copywritten material ok, the risk in terms of opening up your computer to viruses and/or theives far outweighs, IMHO, the gains in free media. Besides, what the heck is wrong with coughing up a buck or two to get those music files via legitimate means anyway? The artist who wrote those songs would sure appreciate it (and deserves it!).

This problem is mitigated by encrypting sensitive folders. WinXP Pro provides this protection natively. Why this was omitted in favor of "password protection of security software" is just more unhelpful disinformation. Data encryption is the first line of defense against stolen files. It is long past if a file will be stolen.... Look at satellite TV programming.

It's a standard media tactic..report the doom and gloom side of a story so I can sell my newspaper. P2P's are here to stay.

This problem is mitigated by encrypting sensitive folders. WinXP Pro provides this protection natively. Why this was omitted in favor of "password protection of security software" is just more unhelpful disinformation. Data encryption is the first line of defense against stolen files. It is long past IF a file will be stolen.... Look at satellite TV programming.

Mike G in Clearwater: Sure you can encrypt a folder but...a)How many average computer users are even going to know how to find all the sensitive files on their computer and b)By the time you take *extra* measures to find and protect all the sensitive stuff on your PC aren't you defeating the purpose? Also encryption is dangerous because if a file becomes corrupt or the key is damaged you're screwed.

The "two computer" guy had the best solution so far. If you really must use P2P sharing, setup a PC dedicated for that purpose.

No, it's not Limewire's "fault". But the fact remains that most of the people out there that install it don't realize what a huge security hole they are opening up - or even that they *have* personal information on their computer. Articles like this are VERY valid and important so that the scores of *average* computer users out there who think Limewire is just a way of getting free music and movies under the counter might think twice.

It appears that every arrogant computer geek responed to this article. All they can do is label the non-geek "stupid" but make no effort to offer insight to preventive measures.

Most everyone is missing objectives of the article. 1) Kids get on the family computer and download P2P software. This is the same computer that the parents are using to work at home on business and personal matters. The parents don't know what P2P is and certainly don't know that it is on the computer. And the kids are out for instant gratification, not protect the family interests. Kids will always be kids. 2) Secondly, if a user knowingly wants P2P software on the computer, they need to know the risks. Unfortunately, not every computer user wants to be a computer expert. These are not dumb people - they erroneously want to leave "techincal stuff" to the techies. But the point of the article is that P2P is not for the disenterested computer owner. P2P users must actively admisister their own security.

I came here to say exactly what Kal from NJ said. Surprised no one mentioned it earlier.

Bob from Cleveland: I understand what you are saying, that most computer users are not savvy. But if you have no concept of security or don't know how something works, ask someone who does. I get calls every week from friends/relatives about how did they get this spyware program or virus on their machine. If you don't know the basics of home PC security, you're doomed. If you don't know, ask one of your geeky friends or neighbors.

P.J. from Sacramento: I applaud your old fashioned ways. I bank online, but still do some things by mail. However, a study done a couple years back showed that most identity theft is done offline (trash, mail, shady store employees etc), so you're no safer doing things by paper than someone with good security measures in place doing things online.
http://www.bbb.org/ALERTS/article.asp?ID=565

The article is a poor attempt to explain P2P and the dangers it may pose to persons with poor computer literacy. The author of this article blames the software and the process of P2P file transfers for the trouble instead of addressing the real problem, which rests with the publics lack of understanding about the software and the process. If something causes harm because it is used incorrectly we shouldn't deem all of those things to be "toxic". We should seek to educate. We should promote caution and understanding, not disdain and mistrust. To use the logic of this author on any other topic would mean that we shouldn't drive or use sharp objects because the users lack of understanding could have detrimental effects on themselves or others. This author SHOULD be espousing the value of computer literacy instead of calling all P2P software "toxic". That is a very small-minded attitude that clearly demonstrates a biased and/or uneducated viewpoint. It's a shame that this author has either sold-out to the RIAA rhetoric or this author is writing about a topic with which they are very poorly informed.

Purchase two encrypted pen drives (K...ston makes a good one) and keep your personal stuff there. You only dock it exactly when you need it. The 2nd pen drive is a backup of the 1st. Store one in a safe deposit box. Well worth the total 140 dollars spent.

Buy an old junker computer to use as a download computer. No way to get your sensitive files no matter how computer illiterate you are.

This is all pretty simple. If you're not familiar enough with a program you probably shouldn't use it. If you're a parent and can't manage to keep up with what your kids are adding on to your computer, then don't let your kids use it. Would you let your children drive your car without your knowledge? No? But you don't mind exposing your personal data on your PC because you can't scan through the programs list to see what they're doing?

You aren't "computer savvy" you say? The entire internet and all its gigantic wealth of knowledge is at your fingertips. LEARN IT. That's how everyone else, including your kids, did it. There's no magic to it. Read and learn. Most of you have forgotten how to do it.

Computers aren't going anywhere and if you're not prepared to learn enough about them to keep yourself secure you're about to be left in the dust and might as well be throwing yourself in a bear pit with a porterhouse strapped to your back.

The other option here is to DISABLE SHARING ALTOGETHER!!!! I will sometimes download something that I need....like freeware of one description or another, but I always DISABLE SHARING IN LIMEWIRE! If you don't, especially if your a computer dunce, you deserve what you get.

You also have the option of not sharing anything on software such as Limewire. You run the risk of being labeled a 'Leech' but what does it matter.

Pay for your porn you cheap skates!

I want the convenience of having my financial records on a computer and am willing to take some risks for that convenience.

However, I take some measures to keep my financial data reasonably safe. I have all my financial records on a separate computer. It's an inexpensive Mac Mini running OSX. The machine is locked down tight. I log into it locally (no remote access) using a specific (non-admin/root) user account that has access to our financial records. The computer is reserved for accessing financial websites of banks and well-known retail websites like Amazon. No e-mail, no non-financial web surfing.

The machine has a software firewall. My home network is split into 3 separate networks (including a wireless network). The Mac is on a part of the network that sits behind 2 different Unix/Linux firewalls.

All credit card purchases are done using the "virutal" credit card numbers that a number of credit card companies provide. Old tax returns are deleted after tax season is over. I only keep paper copies of old tax returns as there's no guarantee that the files will be readable years later. I don't trust a commercial 3rd party company to keep my tax return secure, so until the IRS lets me file directly, I won't use electronic filing.

I check SSL certs by hand before using a financial website. I don't type my username and password on a non-SSL page. Some banks don't have a clue about security. I've had to notify a bank I used about a non-computer security hole. They fixed it the next time I checked.

Things that are important but of no use to others (like family photos) are on the main computer, but are backed up on an external drive as well as remotely. It cost us an additional $500-$600 for the extra computer, but we think it's money well spent.

Wow, this article saved my butt, limeware was sharing my desktop!...I didnt even choose that in the install. I was temporarily storing credit card statements on there!...thanks for the info! (btw, in limeware you can choose to only share certain file types "mp3" so no matter what folder it is, only certain filetypes are shared)

Either Sullivan has a hidden agenda or he is ignorant of certain facts about p2p.

To P.J. from Sacramento. Even if you do things the old fashioned way, the banks and other organizations simply enter all your data into a computer that is, you guessed it, accessible via the Internet. What's worse is that someone has to do this so now you have an extra person in the loop. Someone who may not be honest, or who may simply make mistakes. It's not necessarily safer.

This is not a jab at Limewire. It points out the dangers of P2P software and what can happen. There are a lot of people out there who can work a computer but do not have the slightes clue as to what they are opening themselves up for if they are not careful. I know of two people who have had their credit card numbers stolen off their computers using these techniques. It is not the P2P site's fault, they should have protected themselves better.

You only highlight how to correctly/safely install the software in one part of your article:

"Limewire users now, by default, expose only a "shared" folder if they accept all default choices. That generally means you’ll only share files you’ve downloaded from Limewire."

You should've spent more time and effort highlighting how to properly avoid sharing folders and turning it off completely (also an option). Other comments written here are correct in saying that this is more of a computer literacy problem. What happened to thoroughly reading the "How To" install file?

A lot of us computer savvy people forget how little effort regular people put into exploring the features of software they download/install. Most people install a program, and then don't touch any features because they are simply interested in getting music or videos. As long as they can easily access these files they don't care where the files are going or if they should explore security vulnerabilities.

They don't know how a P2P program works, except that they can quickly get any song or video they want.

Now it's easy to blame these people for being "retarded" or "stupid", but I imagine many specialists feel the same when you don't understand something in their field. I bet the car mechanic is bewildered on why you wouldn't properly maintain your car. And the plumber is mystified on how you let this pipe problem go on for so long.

I'm glad this issue is being highlighted. I checked my P2P software and the program isnt be leaking sensitive documents, but others may not be so lucky. I could have easily messed up an option a year ago to allow criminals to peruse my entire computer.

Anyways don't be so quick to condemn people who aren't as brilliant at you in computers. I'm sure they outshine you in other fields.

I have an idea. DON'T LOAD P2P WAREZ ON YOUR PC!
I used to use them, but they turned out to be more trouble than they're worth.
Most of them are chock full of spyware and adware, too.

This is abhorrent that a fear-inducing article like this, filled with half-truths and half-facts about personal computing usage, appears on MSNBC. Mr. Ballmer, I am ashamed.

Kind of ironic, isn't it. People who sign up for P2P to steal music, movies and such need to be protected from people who steal passwords, bank account info and more...Quid pro quo...

I'm with the poster who said dump all your personal information on CD's, and file them. after tax season, I write it all out to CD and remove the software. Plus the firewalls are always up. I dont use shareware; I've never trusted it

Wow. Such toxicity within these comments! I mean, from one person that says this article is a conspiracy, to the many who call anyone who doesn't knows how they're setting up their Limware installation "stupid". Get a life, people! There are a lot of good, intelligent people out there who don't know what the software is talking about when it asks for a "folder". I know this because I'm amazed at how many people don't "get" the desktop metaphor, much less what a folder is. That doesn't mean they're stupid. It's like a mechanic calling a 16 year old stupid because she drives yet she doesn't know how to change out a head gasket. Some people, intelligents ones even, use computers like an appliance and don't seek to understand them. They just need to be warned about the consequencies of using P2P and that's all this article is trying to accomplish.

I have Limewire. The other night I did a search on the word 'tax'. If I was dishonest, I could have had a field day with the 2006 1040 that I viewed, courtesy of a nice family from Arizona (they did direct deposit, too, so I had their bank info). After deleting that file, I promptly checked my Limewire settings.

Hey, I'm sorry but referring to Limewire as "..faulty peer-to-peer software.." (under Worse than phishing)IS blaming the program not the careless fooligan who exposes his private info. Let's keep it real here...

Stealing is stealing, period. Limewire is no more than a conduit for theives of all types...movies, software, tax and bank info, etc. Call it waht you will, but it IS stealing. Read the Bible, stealing is wrong.

Just a little thought, Most of you are concerned about sharing your entire drive when you are making good points about sharing a single folder. the fact of the mater is the vast majority of junk on limwire is imbedded with "Trojans" and other malicious software, so after you download one of these infected files and click on it its activated, giving someone who knows what they are doing more access to your computer than you have regardless of what files you have set to share. There are lots of fast fun and EASY ways to get into someone’s computer, If you think your safe because of your firewall and other personal protection that just means it will take a little longer for someone to do it. If your going to do it anyways One of the best ways to protect yourself is "to use a little common cents, know what your downloading, Scan it with antivirus before running it. and avoid downloading any software off limewire, the majority of malicious programs are imbedded in pictures and software."

Simple really, either go into the settings and disable sharing files or make one folder and store them all there and only share that folder. Nothing is truly safe anymore but simlpe things can help somewhat protect you from identity thieves.

Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning.

Just a thought, I didn't write it but explains it all.

Ok, I understand the bitterness of many commentors on the negative skew towards p2p software. But do you honestly think a mainstream reporter could write positively about them and not get reprecussions from their bosses? If Mr. Sullivan had written something positive about educating people on how to correctly use p2p software, I could easily see MSNBC accusing him of consenting to illicit activities and reprimanding him.

Mr. Wood asserts that the logical extension of Sullivan's argument is that "we shouldn't drive or use sharp objects because the users lack of understanding could have detrimental effects on themselves or others." He states that the proper emphasis should be the promotion of "caution and understanding."

As a matter of fact, society generally insists that persons wishing to drive a car should demonstrate proficiency before legally doing so. As for sharp objects, there are numerous incidents of personal injury associated with use of power tools by inexperienced DIYers, and many experts recommend against using them without proper training. It is not the job of the mass media to provide driver's ed or circular saw training classes, nor does it fall to a lone MSNBC contributor to publish a Limewire manual when there is already one readily available for anyone who has installed the software. The author's job isn't to sugar-coat what is in fact a very serious threat to the data security of tens of thousands (my estimate) of P2P users. For these individuals, running the software represents a liability, one that they are entitled to be informed of in concrete terms. The course of action they take at that point is theirs to decide.

Mr. Wood also makes the same assertion as other commentators on this story that Sullivan's viewpoint is biased. The story goes that copyrighted works are illegally shared, so monied interests (the MPAA, RIAA, and -- inexplicably -- Microsoft) want to suppress it by using fear of associated risks.

Yes, P2P networks serve to distribute some entirely legitimate content; yes, it is theoretically possible to engage in file sharing without risking your personal data; and yes, a lot of resources are expended by media companies to protect their copyrighted material, sometimes using questionable tactics. This does not invalidate the central point of the article: the use of *any* software that communicates with remote hosts via the Internet is inherently risky. That risk is compounded when 1) the software runs unmonitored for long periods of time 2) the software transmits the contents of local files to remote parties and 3) a substantial proportion of the user base of the software is engaged in various criminal enterprises. That's simple threat modeling, not hysterical blather; you can't wish it away with "caution and understanding." This information may not be relevant to the way you manage your digital life, but that doesn't mean that it's not useful to numerous others.

If a person only has INCOMING sharing(not outgoing), could security on that computer be breached? What if the incoming software is only daily updates of the software already on the computer? Yes, I am one of the computer dummies.

Limewire sucks as a p2p software. At least torrent if anything. The difference with limewire and torrents is that you have a safer chance it is legit. It is not the software fault just that people don't understand the program and is there fault. If you do not understand how to operate a program don't use it. It can damage your computer if you mess up. If you have a problem ask someone who does know to help you.

wow this was fun

I think the best message that anyone can take away from this is if you can't understand what it means to only share one folder on your computer, or none, and you don't know how to make that happen, don't install P2P software of any kind, ever.

It takes about 5 minutes of self-education on the internet to open up that door for yourself. It is only the ignorant who say "I don't know how to do that" rather than looking it up and finding out.

If you want to continue to be ignorant, and not educate yourself on something that a 2nd grader understands how to do, go right ahead. A lot of companies and people will make a lot of money off of you over your lifetime. Keep on driving your SUV, not investing any money because "it's too hard" and popping out children who you train to think similarly. You are the perfect consumer. And because you are the perfect consumer, buy your CD's instead of installing P2P software. Because its the right thing to do.

I know that not everyone is computer savvy, but you can get educated very easy. Read the articles I found on Microsoft's website, and in the left pane you'll see more information. Get involved, and protect yourself!!! The link is: http://www.microsoft.com/protect/family/activities/pirating.mspx
Just copy and paste into a new webpage.
Best of luck!

I am truly amazed at how a simple article warning of the dangers of P2P software has divided everyone into either being "stupid" for not realizing what they were doing, or "criminals" for using P2P to "steal" downloads....

Folks, P2P CAN be dangerous. Paying with a credit card at a restaurant CAN be dangerous. If someone wrote an article on how to be safe when giving your credit card at a restaurant, I can just see a bunch of you saying "hey, if you don't know how to pay for food, you deserve to be robbed!"

Ridiculous.

The article is excellent in provide a warning about P2P software. The article is deficient in providing solutions. But maybe the warning is enough? Fortunately, many of you have provided solutions that the "computer illiterate" can take to heart. Who knows, maybe even some of the "computer geniuses" out there might learn a thing or two.

I know I'm no genius. I learned A LOT from the article.

Mr. Dedalus fails to understand the point of my comment. I am not suggesting that MSNBC or any media outlet provide a manual on the operation of any software or computer device. Instead I expressed disgust that someone might deem any useful thing "toxic" merely because it has the potential to be misused. You don't need a license to use a sharp object and you don't need one to install a P2P program, but both can be legal and useful. Incorrect usage of either one can cause harm, but to call something "toxic" because it has the potential to be misused demonstrates a lack of discernment.

I want to know who do I call because on my Mom's phone, which I registered with the NO call has received numerous calls from JET Magizine - even after I told them three times she was not interested and not to continue calling.

I'm sure the people that have been affected by this are the same types that get scammed by Nigerians. If you don't understand how computers work, don't use them. If you can't be bothered to learn how s piece of software works, don't use it. And don't store sensitive pieces of information on your computer on an open network. That's like taping your Social Security card to your front door.

I didn't know people still used Limewire?

If you don't know how to use/do something you should learn about what your doing before you do it.

It's very much like AIDS...no one thinks they will get it.

Most people with car alarms seem to love the beeping sound and exercise that button every chance they get. People keep a close eye on babies because they need watching and someone could grab your tot in a minute. People understand the importance of securing their homes with locks but are unable to connect the risk of computers and personal data. It's still a mystery to me why business owners especially choose to actively ignore securing their networks. It's certainly not something to be proud of.

I heard their are anti theft companies now who can garantee saftey for the price of a contract,

SEND A COMMENT

PLEASE READ: All comments must be approved before appearing in the thread; time and space constraints prevent all comments from appearing. We will only approve comments that are directly related to the blog, use appropriate language and are not attacking the comments of others. Firms mentioned in our comment area are welcome to add their own comments.

Message (please, no HTML tags. Web addresses will be hyperlinked):

TRACKBACKS

Trackbacks are links to weblogs that reference this post. Like comments, trackbacks do no appear until approved by us. The trackback URL for this post is: http://www.typepad.com/t/trackback/454638/23282462

BUY BOB SULLIVAN'S NEW BOOK

Cover_crunched_by_media Bob Sullivan's new book unmasks hundreds of hidden fees and offers step-by-step instructions on how to fight back. Order it here.

Syndicate this site

RSS is an easy way to get the news you want as it is updated even if you are not on MSNBC.com. More information about MSNBC.com's RSS feeds.

XML