
We know everyone is looking for that best deal online, especially during the Black Friday shopping blitz. Here are some quality online shopping tips from Intersections, Inc. (provider of the Identity Guard [2] identity theft protection service).
We also recommend a post from the always excellent Privacy Rights Clearinghouse - "Holiday Shopping? Ten Timely Tips [3]"
As the biggest holiday shopping days of the year quickly approach, consumers everywhere will be lining up at stores on "Black Friday" for pre-dawn sales that will hopefully net great bargains and savings on holiday gifts. For those that don't want to fight the massive crowds at the malls and local shopping centers, they'll surf the Web on "Cyber Monday" - the Monday right after Thanksgiving - to catch even better sales, conveniently ordering their gifts online to have them shipped all over the world.
Finding the right deal on the perfect gift is going to be a priority this holiday shopping season as consumers everywhere are penny pinching during tougher economic times. The National Retail Federation expects average holiday spending this year will be around $682.74, down 3 percent from $705.01 last year, so getting the best value for your money is key, whether the gift is found on the Internet or at a retail store. With major online price breaks offered on Cyber Monday, online shopping sales are expected to increase 18 percent over last year, according to Information Resources, Inc.
To kick off the 2009 holiday shopping season, Intersections Inc. (Nasdaq: INTX [4]), a leading global provider of consumer and corporate identity risk management services, and provider of IDENTITY GUARD® Total Protection, the award winning identity theft protection service, advises holiday shoppers to take extra caution to avoid damaging their credit or becoming a victim of identity theft. Identity theft peaks this time of year -- wallets are stolen, credit cards are accidentally left behind and scammers everywhere are looking to prey on their next victims -- but there are simple steps consumers can take to avoid making careless decisions that can have a long-term effect on their financial well-being.
"With a soft economy and higher unemployment rates, consumers are under increased pressure to cut holiday spending, and this may lead to an increased willingness to take on greater risks," said Steven Schwartz, Intersections' Executive Vice President of Consumer Solutions. "While retailers will respond with timely offers and special discounts, it's important for customers to protect themselves from scammers and cyber scrooges who may try to prey on their emotions with targeted offline and online schemes."
One way to protect yourself is to be vigilant about where you shop (online or at the mall), what information you provide and to whom, and to protect your computer from spyware, malicious code and Trojans. Intersections' IDENTITY GUARD® Total Protection [2] is the most comprehensive offering on the market today covering personal information, credit reports, public records, computer, Internet and mobile transactions. The service also provides sophisticated software that protects consumers against keylogging attacks, secures their passwords and user IDs as they navigate online, identifies legitimate websites, and protects their computers from advanced malware software. IDENTITY GUARD® Total Protection [2] also provides identity theft recovery services and financial reimbursement insurance in the event identity theft occurs. Find out more at www.identityguard.com [2].

The spirit of giving has hit Google. They are generously providing free Wi-Fi at 47 airports from November 10, 2009 to January 15, 2010. That's great, but there are a few precautions you should take to keep yourself safe.
Using the free service is simple. You simply select the free Wi-Fi and accept the terms of service and there's no need to give any form of payment. However, Google wants you to catch the giving spirit and give a donation to any of the three non-profit organizations [7] they've partnered with. But, donate [7]once you're using a secure Internet connection at home - not on the Wi-Fi network. In addition to providing free Wi-Fi, Google's having a photo contest. You could win a prize just for submitting a photo [8] of you using the free Wi-Fi.
You can take advantage of Google's generosity at one of the following 47 airports:
| Austin (AUS [10]) | Indianapolis (IND [11]) | Panama City, FL (PFN [12]) |
|
Baltimore (BWI [13]) |
Jacksonville, FL (JAX [14]) | Pittsburgh, PA (PIT [15]) |
| Billings (BIL [16]) | Kalamazoo (AZO [17]) | Portland, ME (PWM [18]) |
| Boston (BOS [19]) | Las Vegas (LAS [20]) | Sacramento (SMF [21]) |
| Bozeman (BZN [22]) | Louisville (SDF [23]) | San Antonio (SAT [24]) |
| Buffalo, NY (BUF [25]) | Madison (MSN [26]) | San Diego (SAN [27]) |
| Burbank (BUR [28]) | Memphis (MEM [29]) | San Jose (SJC [30]) |
|
Central Wisconsin (CWA [31]) |
Miami (MIA [32]) | Seattle (SEA [33])* |
| Charlotte, NC (CLT [34]) | Milwaukee (MKE [35]) | South Bend (SBN [36]) |
| Des Moines (DSM [37]) | Monterey (MRY [38]) | Spokane (GEG [39]) |
| El Paso (ELP [40]) | Nashville (BNA [41]) | St. Louis (STL [42]) |
| Fort Lauderdale (FLL [43]) | Newport News (PHF [44]) | State College (SCE [45]) |
| Fort Myers (RSW [46]) | Norfolk (ORF [47]) | Toledo (TOL [48]) |
| Greensboro (GSO [49]) | Oklahoma City (OKC [50]) | Travers City (TVC [51]) |
| Houston Hobby (HOU [52]) | Omaha (OMA [53]) | West Palm Beach (PBI [54]) |
| Houston Bush (IAH [55]) | Orlando (MCO [56]) |
*Seattle launches late November
Airport Wi-Fi - like other public hotspots - is not secure and you should avoid logging into your bank account or other sites with sensitive info. Wireless network security can be compromised and put your passwords and other data out in the air and available to a fellow traveler with the right hacking tools.
We don't mean to scare you out of using the Google's Wi-Fi gift but to educate you about the potential risks
Here are some tips on how to protect yourself when using any Wi-Fi connection:
This video from Forbes provides more details on what you should watch out for:
Check out Google's Free Wi-Fi for the Holidays [57] site and their FAQ page [58] for more details.

Microsoft launched an update Tuesday to patch about fifteen holes in Windows 2000, Windows XP, Windows Server and Office. While most of the patches are related to various Word and Excel, or Windows Server issues, a critical vulnerability was found within the Windows OS kernel - a fairly rare occurrence.
The Windows kernel is the core of the operating system and the flaw is related to how embedded font files are processed. We're not going to get into the technical mumbo-jumbo here, so we'll just tell you that the problem - if exploited - would allow malicious code to be passed directly to the system, bypassing any browser defenses that have been created to stop this sort of attack. The code could be downloaded just by visiting a web page prepared by hackers. With the increase of URL shorteners being used [61] as well as advertising attacks [62], it's easier than ever to be accidently exposed to some nasty code.
Microsoft rated the kernel flaw as critical and gave it an exploitability ranking of 1. This means that Microsoft expects there to be a working exploit within 30 days and is similar to "SEVERE - Severe risk of terrorist attacks" on the Homeland Security advisory system (if anyone is actually paying any attention to that any more).
Researchers agree that the bad guys are going to move quickly:
"An exploit will appear sooner rather than later," said Jason Miller, the security and data team manager for patch management vendor Shavlik Technologies. "The target is Internet Explorer, and browsing is the number one attack vector in the world right now. Users can be infected simply by browsing on a [malicious] site.
So this is a big hole that can do some nasty things on unpatched computers.
Take the following steps to protect your computer:
To set your PC to update automatically in Windows XP, simply access the Control Panel in the start menu, click "Automatic Updates," and choose "Automatic." 
For Vista, open Windows Update in the start menu, select "Change Settings," and then select "Install updates automatically." 
More information can be found at Computer World [64] and The Washington Post's Security Fix blog [65].

We've been educating you about phishing emails [68] for years and in trolling around your inbox, it’s not uncommon to come across one of those pesky emails just about every day. The easiest approach is to ignore it or mark it as spam and go on with your day. However, by taking just a minute or two to report it, you can help make the Internet a safer place for you and the rest of the world.
OpenDNS, the world’s largest, fastest-growing DNS service provider, launched PhishTank [69] in an effort to make the Internet a better place for all us.
Phishtank serves as a clearing house for data and information about phishing on the Internet and provides the information to developers and researchers to integrate anti-phishing data into their applications. Best of all, the Phishtank services are free!
Here are some statistics from October, 2009 to give you an idea of what kind of impact PhishTank has on scam emails:

Exercising a little philanthropy has never been easier:
As a side note, OpenDNS offers other services through innovative uses of the DNS. Some of these include free parental controls (porn filtering), phishing protection, and other advanced services for consumers and network administrators alike. Check out their free and deluxe plans here: http://www.opendns.com/start [72].

Medicare receives 4.4 million claims a day and approximately 1 out of 10 of those are fraudulent. All of the fraudulent claims add up to a large sum of wasted time and money and the government is trying to put a stop to it. The Department of Justice (DOJ) and the Health and Human Services (HHS) Office of the Inspector General have been working together to reduce fraudulent activity.
In 2008, the DOJ and HHS and the Centers for Medicare and Medicaid Services worked together through the criminal and civil systems to secure 588 criminal convictions, obtain 337 civil administrative actions against individuals and organizations who were committing Medicare Fraud, and recovered more than a billion dollars in health care fraud monies . . . To date in fiscal year 2009, the Department of Justice has already recovered nearly a billion dollars in health care fraud monies and recorded 300 convictions.
In addition to catching Medicare thieves the DOJ and HHS want to enable seniors to participate in the fight. They want to raise awareness about the kinds of fraud that are happening and give seniors the tools they need to deter, detect and defend!
Here are a few examples of how Medicare is scammed out of billions of dollars a year.
Medicare recipients need to keep themselves safe.
Learn to recognize common schemes. A few common fraud schemes are:
It's critical that Medicare recipients check their statement summary sheets and look for:
If you see any of these problems make a phone call to your provider or Medicare to get it resolved. It could just be a clerical error or it could be a fraudulent act that needs to be reported.
To some the task above may seem very overwhelming. The DOJ and HHS understand that seniors want to protect themselves but may not have the knowledge to do so. For this reason Senior Medicare Patrols (SMP's) were created. SMP's are groups or seniors, formed in communities, that help other senior citizens learn how to combat Medicare Fraud. They bring awareness to seniors in the community, teach seniors how to read and understand their Medicare summary statements and offer support.
Medical identity theft and Medicare fraud are a huge problem that the government cannot tackle on its own. While they do their part it's important for senior citizens to do their part to protect themselves from medical identity theft and be on the watch for Medicare fraud.
More detailed information is available in the Fight Back! Medical Identity Theft and Medicare Fraud brochure [76] put out by the HHS.
More information is available at Stop Medicare Fraud's website [77].
Links:
[1] http://www.fightidentitytheft.com/blog/avoid-grinch-when-shopping-online
[2] http://partners.nextadnetwork.com/z/406/CD76
[3] http://www.privacyrights.org/holiday-shopping-tips-2009
[4] http://studio-5.financialcontent.com/prnews?Page=Quote&Ticker=INTX
[5] http://www.fightidentitytheft.com/blog/avoid-grinch-when-shopping-online#comments
[6] http://www.fightidentitytheft.com/blog/airport-wi-fi-isnt-secure-even-if-google-makes-it-free
[7] http://www.freeholidaywifi.com/give-back/
[8] http://www.freeholidaywifi.com/photo-contest/
[9] http://www.fightidentitytheft.com/%20%20%20a.href%20%20%20
[10] http://www.google.com/search?q=AUS airport
[11] http://www.google.com/search?q=IND airport
[12] http://www.google.com/search?q=PFN airport
[13] http://www.google.com/search?q=BWI airport
[14] http://www.google.com/search?q=JAX airport
[15] http://www.google.com/search?q=PIT airport
[16] http://www.google.com/search?q=BIL airport
[17] http://www.google.com/search?q=AZO airport
[18] http://www.google.com/search?q=PWM airport
[19] http://www.google.com/search?q=BOS airport
[20] http://www.google.com/search?q=LAS airport
[21] http://www.google.com/search?q=SMF airport
[22] http://www.google.com/search?q=BZN airport
[23] http://www.google.com/search?q=SDF airport
[24] http://www.google.com/search?q=SAT airport
[25] http://www.google.com/search?q=BUF airport
[26] http://www.google.com/search?q=MSN airport
[27] http://www.google.com/search?q=SAN airport
[28] http://www.google.com/search?q=BUR airport
[29] http://www.google.com/search?q=MEM airport
[30] http://www.google.com/search?q=SJC airport
[31] http://www.google.com/search?q=CWA airport
[32] http://www.google.com/search?q=MIA airport
[33] http://www.google.com/search?q=SEA airport
[34] http://www.google.com/search?q=CLT airport
[35] http://www.google.com/search?q=MKE airport
[36] http://www.google.com/search?q=SBN airport
[37] http://www.google.com/search?q=DSM airport
[38] http://www.google.com/search?q=MRY airport
[39] http://www.google.com/search?q=GEG airport
[40] http://www.google.com/search?q=ELP airport
[41] http://www.google.com/search?q=BNA airport
[42] http://www.google.com/search?q=STL airport
[43] http://www.google.com/search?q=FLL airport
[44] http://www.google.com/search?q=PHF airport
[45] http://www.google.com/search?q=SCE airport
[46] http://www.google.com/search?q=RSW airport
[47] http://www.google.com/search?q=ORF airport
[48] http://www.google.com/search?q=TOL airport
[49] http://www.google.com/search?q=GSO airport
[50] http://www.google.com/search?q=OKC airport
[51] http://www.google.com/search?q=TVC airport
[52] http://www.google.com/search?q=HOU airport
[53] http://www.google.com/search?q=OMA airport
[54] http://www.google.com/search?q=PBI airport
[55] http://www.google.com/search?q=IAH airport
[56] http://www.google.com/search?q=MCO airport
[57] http://www.freeholidaywifi.com/
[58] http://www.freeholidaywifi.com/faq/
[59] http://www.fightidentitytheft.com/blog/airport-wi-fi-isnt-secure-even-if-google-makes-it-free#comments
[60] http://www.fightidentitytheft.com/blog/microsoft-windows-kernel-patch
[61] http://www.fightidentitytheft.com/blog/do-you-know-what-lurking-twitter-url
[62] http://www.fightidentitytheft.com/blog/scareware-everyday-halloween
[63] http://update.microsoft.com
[64] http://www.computerworld.com/s/article/9140688/Hackers_will_exploit_Windows_kernel_bug_researchers_say?taxonomyId=17&pageNumber=1
[65] http://voices.washingtonpost.com/securityfix/2009/11/microsoft_plugs_15_holes_in_wi.html?wprss=securityfix
[66] http://www.fightidentitytheft.com/blog/microsoft-windows-kernel-patch#comments
[67] http://www.fightidentitytheft.com/blog/report-phishing-email-what-do-when-you-catch-phish
[68] http://fightidentitytheft.com/paypal_scam.html
[69] http://www.phishtank.com
[70] http://www.phishtank.com/register.php
[71] mailto:phish@phishtank.com
[72] http://www.opendns.com/start
[73] http://www.fightidentitytheft.com/blog/report-phishing-email-what-do-when-you-catch-phish#comments
[74] http://www.fightidentitytheft.com/blog/medicare-fraud
[75] http://www.smpresource.org
[76] http://www.stopmedicarefraud.gov/fightback_brochure_rev.pdf
[77] http://www.stopmedicarefraud.gov/index.html
[78] http://www.fightidentitytheft.com/blog/medicare-fraud#comments