Social media increases online security threats

A recent study by TNS Research showed that Kenyans spend up to seven hours per week on social networking sites including twitter and Facebook

By Macharia Kamau

That no one is safe online seems like a modern day hazard that anyone willing to embrace technology has to live with.

This is expounded by the fact that for a significant proportion of the world population, a lot of time is spent online working and has in the recent past become an accepted social platform.

This has meant that many people live their lives in the virtual world.

And in keeping up with global trends, Kenyans especially the urban youth, are spending substantial amounts of time online.

A recent study by TNS Research showed that Kenyans are now spending on average 6.5 hours per week on social networking sites including twitter and Facebook.

The study further found out that 62 per cent of users go online more than five times a day and over 65 per cent spend more than one hour online each time they connect to the Internet.

However, there is a downside to this. More time spent on the Internet has meant that users are exposing themselves to online attacks that include harassment, cyber-stalking, online scams and identity theft.

There have been rampant cases of these attacks, especially in cases, where users give too much information, giving attackers and other malicious users ammunition to plan and execute their attacks.

While such online crimes are yet to happen in Kenya on a large scale, Internet security experts warn it is only a matter of time and say to stay safe, Internet users should post minimal material about themselves online.

George Njoroge, managing director East African Data Handlers – a local data recovery and online security firm – says users should have a clear understanding of the terms governing the different forums that people post their personal information online.

"One needs to question who owns online content. For example, on a social networking site, who claims ownership of user-posted content," he quips.

"In an instance where one ceases to be a member of the social site and deactivates their accounts and even deletes the content, one should question whether that material is really deleted or can it be retrieved."

While he notes that it is inevitable for people to upload personal information online in today’s environment where all operations are shifting to the net, he advices that personal information should be posted online on a ‘need to do basis’.

"More personal content should be kept offline...one should always limit what they post online from the basic address to the more personal family photographs and sensitive details like where you bank or bank account information."

And while there has been much talk on security of corporate data, Kenyan firms are still lagging behind in boosting the security of their online undertakings, which Internet security experts warn is a disaster waiting to happen.

Njoroge notes that most firms are yet to put in place policies that would protect their data even from basic attacks or even manipulation.

"Banking systems have relatively better systems but the situation is dire in other institutions right from Government and to private sector players. The security levels we have embraced generally as a nation are really wanting," he said.

Most organisations do no have policies that govern the everyday use of ICT tools in the work place. For instance the use of computers and the information that they hold and commitment on e-mail.