Recently an old friend Philip Tellis posted an article on web application security for developers. Even when you are security conscious and use tools to protect yourself, you can become a victim of security breach as I have posted in this article. That made me thinking what as a user of the web applications you should be doing to secure yourself against various on-line attacks?

Here are some tips and tools you should use to secure yourself while you are on-line.

Protection against Cross-site scripting (XSS), Cross-site request forgery (CSRF/XSRF), Clickjacking :

I found Firefox with NoScript extension very useful in protecting me against the above attacks. With this extension you just allow the site/domain you are visiting to load JavaScript(s). This way you are eliminating possibility of loading scripts from the sites outside the page you are visiting. NoScript provides you with complete control of loading of JavaScript(s) on a web page.

Choose a secure browser:

I strongly recommend that you use more secure browsers like Firefox or Chrome. These browsers are open source and known to have better security track record in finding and fixing security related issues faster. Also keep these browsers updated regularly for any security related other bug fixes.

Choose a secure OS platform:

I use GNU/Linux as OS on my Desktop. This provides me added level of security as this OS is designed as multi-user system which automatically restricts  permissions to system files from normal users. This helps in restricting spread of virus and other malwares that threaten your security and privacy on-line.

Keep separate profiles:

I use Firefox as my primary browser for all my on-line needs. Firefox supports multiple profiles and private browsing. I have created multiple profiles for my different needs. I have profile for my emails, net banking and other financial transactions. This profile is loaded with strict security in mind and starts with private browsing mode by default. That way no passwords, cookies, sessions and cache is stored on my system when I close the browser. I also do not click directly on links that I receive via email, IM or social networking feeds. I generally copy the link and open the link in a general profile.

I have separate profile for my general browsing needs. This profile is little less restrictive bus still loaded with NoScript. This way any rouge or compromised web sites will not have access to my sensitive information.

Use secure pages for logins:

Wherever, a site offers secure (HTTPS) and non-secure (HTTP) for a login page prefer secure page. One such notorious site is IRCTC Rail Ticket booking site.

Use strong passwords

Many sites today requires you to login to transact business. Use passwords that are mixture of Capital and small letters and numbers and punctuations.

Keep different passwords for critical and non-critical sites.

You

Customer 1st

An introduction and background about innovative Customer Relationship Management solution for Retail Businesses by Shah Micro System Pvt. Ltd.

What:

Most retails businesses rally on walk-in customers. Once the sales transaction with the customer is concluded the businesses generally forget about the customer (except those customers who want credit)

These businesses rally on traditional marketing media like TV advertisements, news papers ads or leaflets and treats all customers as new customers. For these businesses there are no easy way to maintain the relationship with his existing customers and keep the communication channel open with these customers.

Why:

With increased competition in the retail sector from organized retail and other retailers in the same market, it becomes important to acquire new customers and even more important to retain existing customers.

To retain an existing customer you have to know about your customers and constantly keep in communication with your customers to create a new level of engagement. To keep the customers continuously engaged with your business you must constantly keep the customers updated about your business. These updated could be in the form of arrival fresh stocks, special scheme or news about discount sale you are running or it could be a happy birth day or an anniversary greetings!

How:

Capture: The first step to engage an existing customer is to know about him or her. In this step you will capture information about your customer in a structured manner. This repository of your customers will help you to reach to them systematically.

Classify / Organize: Once you have captured the information about your customers you can organize them in various groups or categories. This classification and categories will help you in communicating more effectively. For example, sending news about availability of new shades of lipstick to your female customers can enhance your business, but the same news to your male customers is useless and may be even inappropriate.

Communicate / Connect: Once you have captured and classified your customers, you start communicating with your customers by providing useful and relevant information about your products and services or some other useful information to your customers. This way your business will remain in constant touch with customers and will translate into better recall and more revenue from your existing customers.

Analyze: A structured customer data can help you in planning for your inventories. Create better product mix for your outlet and improved customer service.

Optimize: