UPI Study › Courses › Ethics in Technology › Free lessons › Lesson 2.3 Free with a free account
Practical Measures You Can Take Right Now to Defend Your Computer Against Attacks
Ethics in Technology · Chapter 2: The Pillars of Security and Your First Line of DefenseSection 2.3 · lesson 7 of 11614 min · free with a free account
Free preview
Create a free account to keep watching
It takes a minute and costs nothing. Your free account unlocks all of Chapter 1 and 3 more lessons of Ethics in Technology.
Lesson complete
Earn the 3 college credits for Ethics in Technology
Enrolling adds a quiz after each lesson, the graded work and the official transcript. Recommended for credit by NCCRS.
Next lesson: How Modern Technology Collects, Stores, and Exposes Your Personal Information →← Recognizing the Different Types of Dangers That Target Information SystemsNext lesson: How Modern Technology Collects, Stores, and Exposes Your Personal Information →
In this lesson
8 habits that work together around your information.
- Maintain software and account protections
- Explain random passwords and MFA choices
- Build and test a 3–2–1 backup arrangement
- Browse and use Wi-Fi with care
Free study notes
Get this lesson's notes by email
The key points and 4 practice questions with answers, in your inbox. One email, free.
One email. Unsubscribe in one click.
Transcript
Everything said in the video, section by section (1,776 words). Read along, or search it.
The Pillars of Security and Your First Line of Defense
Practical Protection for Your Computer
Everyday computer protection depends on repeatable habits, rather than one perfect product or setting. An unpatched device, reused password, or missing backup can create an opening for serious harm. This lesson organizes practical protection into eight habits, each supporting the others. We begin with updates, because they close weaknesses that have already become known. Long, random, unique passwords limit guessing and reuse, while a manager makes them practical. Multi-factor sign-in adds different proof, reducing what a stolen password alone can achieve. Malware protection and a firewall help govern software and network access on the device. Backups provide recovery, when prevention fails or a device is damaged or stolen. Careful browsing and Wi-Fi choices address decisions that protective tools cannot settle entirely for you. The aim is layered protection you maintain, with actions repeated often enough to remain useful.
Habit 1
Update Software and Complete Restarts
Software can contain weaknesses, and patches fix some of the problems its maker discovers. Publishing a fix also gives attackers information about the weakness, increasing the urgency for unpatched devices. Turn on automatic updates where available, and complete requested restarts rather than postponing them repeatedly. The operating system matters because it controls the device and supports the applications using it. Browsers need maintenance too, because they connect you with services and content across the internet. Update applications and browser extensions, and remove items that no longer serve a useful purpose. Routers and smart devices also need firmware updates, even though they receive less routine attention. Check the manufacturer's application or administration page for their supported maintenance process. Devices no longer supported by their maker stop receiving normal fixes for newly discovered weaknesses. Keep that support status in view, especially when the device handles information important to you.
Habit 2
Long, Random, and Unique Passwords
A strong password is long, random, and used for only one account. The source gives a twelve-to-sixteen-character range; prefer longer choices, rather than treating the lower end as ideal. Several randomly selected words can also form a long passphrase, without relying on a predictable personal detail. Names, birthdays, and familiar patterns are often tried earlier than completely random combinations. Uniqueness matters because criminals can try credentials stolen from one service against other services. That reuse-based method is called credential stuffing, and length alone does not stop it. A password manager generates and stores different passwords, in an encrypted vault, and fills them when needed. Protect the manager with a strong master password, and enable multi-factor sign-in where offered. Do not share passwords through email or texts, or leave them on notes beside the computer. Replace a compromised password promptly, and review any other account where it was reused.
A Defined Thought Experiment
Length Changes the Number of Possibilities
The source's calculation assumes an attacker tries ten billion guesses per second, with completely random passwords. Eight characters selected from ninety-five choices give about six point six times ten to the fifteenth possibilities. Trying that entire space takes about eight days, under the stated hypothetical rate. Four words from a seven-thousand-seven-hundred-seventy-six-word list give about three point seven times ten to the fifteenth possibilities. That entire space takes about four days, showing that short word combinations are not automatically strong. Twelve random characters give about five point four times ten to the twenty-third possibilities, taking about one point seven million years. Six random words give about two point two times ten to the twenty-third possibilities, taking about seven hundred thousand years. Sixteen random characters give about four point four times ten to the thirty-first possibilities, beyond the universe's age in this exercise. These are exhaustive-search illustrations, rather than guarantees for real services, equipment, or password choices. The important relationship is how length and genuine randomness expand the space, while predictable choices undermine it.
Habit 3
Use Different Forms of Sign-In Proof
Multi-factor authentication combines different kinds of proof, rather than simply asking for two passwords. A password is something you know; a phone or security key provides something you have. A fingerprint illustrates something you are, when supported within the sign-in arrangement. Text-message codes improve on a password alone, but phone numbers and messages can be attacked. Authenticator applications generate changing codes on the device, often every thirty seconds, without SMS delivery. Those codes can still be captured through deception, so their presence does not remove the need for caution. Push approval requires you to recognize a sign-in you initiated; reject requests you did not start. Security keys and passkeys provide stronger resistance to fake login pages, through cryptographic proof. Prioritize email, banking, cloud storage, and social accounts; email matters because it can reset other passwords. MFA makes a password alone insufficient, while the chosen method and your handling still affect protection.
Habit 4
Keep Malware Protection Active
Antivirus, or anti-malware protection, watches for harmful software and can block or remove it. Windows includes Microsoft Defender Antivirus, and macOS includes built-in malware protections. Begin by checking that the relevant protection is active, rather than assuming it is working. Keep it updated, because recognition and protection depend on current information and maintained software. The source recommends one real-time antivirus product, since simultaneous competing products can conflict or slow operation. Pay attention to warnings about a download or website, instead of clicking through them automatically. A warning is an opportunity to stop, verify the source, and reconsider the action. Download applications from official stores or the software maker, rather than an unexpected imitation page. Fake free versions and pirated software can introduce harmful programs alongside the promised application. Protection works best when software checks and personal download choices reinforce one another.
Habit 5
Back Up, Disconnect, and Test
Backups preserve a route to recovery after ransomware, drive failure, device theft, or another loss. The three-two-one rule means three copies, on two storage types, with one copy off-site. The student example keeps primary files on a laptop, an external copy, and an off-site cloud copy. The external copy is updated weekly, then the drive is unplugged between uses. Disconnection matters because ransomware may reach a backup drive that remains attached to the affected computer. Check the actual storage arrangement, rather than counting different locations as automatically different media types. Also verify that the cloud service provides recovery of correct files, rather than assuming synchronization guarantees it. A changed or damaged file may otherwise be synchronized, instead of leaving a usable earlier copy. Restore a test file occasionally, so evidence replaces the hope that a backup will work when needed. The useful measure of a backup is what you can recover, after the original has failed.
Habit 6
Keep the Operating-System Firewall On
A firewall checks network connections against rules, limiting unwanted access to the computer. Both Windows and macOS include a firewall, which should remain enabled and appropriately configured. In Windows Security, use Firewall and network protection to check the network profiles. Treat an untrusted network as public, rather than granting the trust of a private home network. On a Mac, open System Settings, then Network, then Firewall, and review its options. Allowed services and applications affect which incoming connections can reach the device. If an unfamiliar application requests access, pause before allowing an exception. Ask whether you installed it, recognize it, and understand why it needs that connection. If you remain unsure, do not grant access simply to dismiss the request. The firewall complements malware protection and safe browsing, rather than replacing either layer.
Habit 7
Check the Address and the Download
Check website addresses carefully, because a familiar appearance can hide a deceptive destination. The source uses an address where the digit one replaces a letter in a familiar service name. Typing important addresses yourself, or using trusted bookmarks, reduces dependence on unexpected links. HTTPS protects the connection between browser and website, but a dishonest website can use HTTPS too. Do not treat encryption as evidence that every claim or download on the site is honest. Be suspicious of urgent infection pop-ups directing you to call a number. Download software from official sources, and avoid pirated versions that may carry harmful additions. Keep only necessary, trustworthy browser extensions, because each one adds software and permissions to maintain. Leave the browser's fraud or safe-browsing warnings enabled, and take its concerns seriously. Slow down where the decision matters, especially when a message is trying to make urgency replace judgment.
Habit 8 at Home
Maintain the Router and Separate Guests
Home Wi-Fi connects many devices, making router maintenance part of the wider protective routine. Replace the router's default administrator password, rather than leaving its management access predictable. Use WPA three encryption where available, or WPA two with A E S where necessary. A long, unique wireless password limits another route into the network. Keep router firmware updated, using the maker's supported process for the device. Visitors and smart devices can use a guest network, rather than sharing every connection with routine work. Review features you do not use, including remote management, and disable unnecessary access routes. These choices reduce exposure without assuming that being at home makes every connected device trustworthy. The administrator password and the wireless password serve different access purposes, so review both. Include the router in periodic maintenance, rather than treating it as an appliance that never needs attention.
Habit 8 in Public
Verify the Network Before Connecting
Public wireless networks are shared with strangers, so their names and trust settings deserve extra care. If two airport networks have similar names, ask staff which exact name belongs to the legitimate service. A familiar-looking name alone does not establish who operates the network. Use protected connections for sensitive tasks, and consider an appropriate trusted virtual private network where needed. The source also offers using your phone's mobile hotspot, when the public network remains uncertain. Set an untrusted connection to Public where the operating system supports network profiles. Turn off file and printer sharing, reducing what other users on that network can reach. Disable automatic joining of open networks, so the device does not connect merely because a name is available. Continue checking website addresses and requests, because network protection does not make every destination honest. The aim is informed connection choices, rather than treating every free wireless network as equally dependable.
A Repeatable Routine
Turn the Habits Into Scheduled Actions
Today, enable automatic updates, activate MFA for email and banking, and check malware protection and the firewall. This week, set up a password manager and replace the most important reused passwords. Also arrange backups that provide several copies, appropriate storage separation, and an off-site recovery option. Every month, complete pending updates and restarts, check backup operation, and review browser extensions. Every few months, restore a test file, check router firmware, and remove unused applications. The schedule makes maintenance repeatable, rather than something remembered only after a warning or loss. Each habit has limits, and a determined attack or ordinary failure can still get past one layer. The next layer should reduce the opening, reveal the problem, or preserve a route to recovery. That is defense in depth applied to personal information, devices, and everyday decisions. Start with the practical actions, then keep checking that the protections still work as intended.
About Ethics in Technology at UPI Study
Ethics in Technology (Computer Science 195) is a self-paced online course of 116 video lessons in 15 chapters, from cybersecurity basics, privacy and surveillance to big data, hacking, malware, network defense, intellectual property, cybercrime, encryption, emerging technology and digital citizenship. It carries a NCCRS credit recommendation for 3 semester credits.
Every lesson transcript is free on pages like this one, and the videos are free with a free UPI Study account. Enrolling adds a practice quiz after each lesson, the graded work and final exam that earn the credit, lifetime access, and an official transcript on completion. UPI Study has helped over 130,000 students with college credits. ACE and NCCRS have over 2,100 cooperating colleges that will consider accepting credits; the final decision is with the universities.
Enroll now → Course details Download the syllabus All Computer Science courses
Compare: Cybersecurity vs Ethics in Technology · Which ethics course?
Why take it here
Why students take Ethics in Technology with UPI Study
Where the credit goes
Universities that work with NCCRS
Ethics in Technology carries a NCCRS credit recommendation. These universities work with NCCRS; some are UPI Study's signed partners. ACE and NCCRS have over 2,100 cooperating colleges that will consider accepting credits; the final decision is with the universities.
Thomas Edison State UniversitySigned partner
University of the PeopleSigned partner
Charter Oak State CollegeSigned partner
Strayer UniversitySigned partner
Columbia Southern UniversitySigned partner
Indiana TechSigned partner
Penn StateWorks with NCCRS
Southern New Hampshire UniversityWorks with NCCRS
SUNYWorks with NCCRS
+many more cooperating universitiesFind my college →Find my college → Not listed? Ask Athena in the corner of this page, or book a 15-minute call.
FAQ
Questions students ask us
About Practical Measures You Can Take Right Now to Defend Your Computer Against Attacks
What makes a password strong?
How long does it take to crack an 8-character password compared with a 12-character one?
Which type of multi-factor authentication is most secure?
What is the 3-2-1 backup rule?
About the Ethics in Technology course
How many college credits is Ethics in Technology?
How much does Ethics in Technology cost and what is included?
Which universities accept UPI Study credits?
How long does Ethics in Technology take?
How are the exams done?
How do my credits reach my college?
Ready for the full course? Earn 3 credits in Ethics in Technology.
116 video lessons, a quiz after each one, and the graded work that earns the credit. Recommended for credit by NCCRS.
3 credits · NCCRSEnroll →