michael-bui

I'm a software developer with a background in consulting and experience in technical leadership roles. The majority of my career has been with using .NET to build applications across the full-stack and for mobile, desktop, and web. My main area of interest is in agile software development and building cross-platform applications using technologies like Flutter and Xamarin.Forms.

These days I do more work using Flutter. Besides using it professionally to build applications, I've done a talk at a meetup, maintain a blog where I post about Flutter in <a href="https://dexterx.dev">DexterX</a> and contribute to and maintain various open-source projects.

Sofware Developer

Michael Bui

Learn the basics of the Flutter development kit and the Dart programming language and build an app to manage your shopping wishlist.

Build a Flutter Wishlist App, Part 1: Introducing Flutter and Building a Basic Wishlist App

1097492785caf9ffeebffeb624202d8f?s=200 avatar

1097492785caf9ffeebffeb624202d8f?s=200

Prosper is a great speaker, community leader, open source hacker, technical consultant, and a fervent Developer Advocate. He is a full-stack software engineer who has worked on biometric, health and developer tools. Prosper recently co-founded a startup called Eden that’s focused on improving the quality of lives in Nigeria and currently leads the engineering team. He also co-founded forloop, the largest developer community in Africa.

Former Auth0 Employee

Prosper Otemuyiwa

Learn these six tips that will help you shop online safely on Cyber Monday



---

Technology has made it very easy for people to purchase goods and services from the comfort of their homes. **Cyber Monday** is approaching, and a lot of people will be online watching the prices of their favorite items fall, ready to purchase them when the price drops far enough. Billions of dollars will be spent online during this popular *end-of-the-year sales* event. It's well known that a lot of online transactions happen during the months of October, November, and December. Unfortunately, a lot of fraudulent online activities happen during this time as well. Cyber criminals are most active during holidays, and a lot of online shoppers are negligent about cyber security threats. These kind of users make easy targets for hackers and cyber-criminals.

---

How do you stay safe while shopping online? I'll expatiate on six tips that can help you shop safely online on **Cyber Monday.**

## 1. Ensure that the site is secure by looking for https in the URL

Once you visit a website, ensure that the site has Secure Sockets Layer (SSL) encryption installed. The website will start with **https://** and a locked padlock will also be present in the address bar, near the URL. Don't attempt to buy anything with your credit/debit card on a website that has no SSL installed.

![Visit Secure Sites on CyberMonday](https://images.ctfassets.net/23aumh6u8s0i/7wJqzJ0zgyqqCbHlvqpjdw/cfb8474d9a636d4c621c4c78ec5ea306/Unsecure-Sites)
_Make sure you shop on secure sites_

## 2. Avoid using weak passwords

Hackers maintain a list of commonly used passwords that are deployed via bots to try on various websites at a time. Using a weak password increases the risk that your credentials could be randomly generated in those lists. If you currently have a weak password on the sites you shop with regularly, it's time to change to a very [strong](https://auth0.com/docs/connections/database/password-strength) password. Here are some tips to help you create a secure password:

* Use a long password, including at least 10 characters with a combination of numbers, symbols, and upper and lowercase letters.
* Avoid using common information such as your name, Social Security number, nickname, and so on.

![Avoid Weak Passwords on CyberMonday](https://images.ctfassets.net/23aumh6u8s0i/66bqIfE5R43vV3m91EWTyu/fb2cf7ea0f3dbd6fa20210f2b2808675/Weak-Password)

## 3. Look out for fake and forged Sites

During this shopping period, cyber criminals go to great lengths to replicate popular websites. Users can then get tricked into providing sensitive information such as usernames, passwords, Social Security numbers, and credit card details on fake versions of popular sites, thinking that they are logged into the real site.

Here are some tips to ensure that you don't log into a forged site:

* Look out for the encryption symbol, *padlock*, in the URL. Verify that the site is secure by ensuring that the URL starts with **https://** instead of **http**.
* Look out for typos in the site name and URL.
* Look out for fake ads and emails.
* Use anti-phishing software, such as **Kapersky** or **Avast**.

![Avoid Phishing Sites](https://images.ctfassets.net/23aumh6u8s0i/6oUZ40jndT2KjmMQ7mkefW/9193a67ac6cbfb154870a6748cb7c8a5/Phishing)

## 4. Try as much as possible to shop with trusted brands

There are various shopping websites that have earned a strong reputation over time. I advise that you shop on those websites that are globally recognized as trusted brands. These brands have experienced **Cyber Monday** events various times and have improved their **tech** to provide very robust security measures to handle the numerous online shoppers who will log into their platform.

**Note:** A lot of cyber criminals try to play on this mentality by creating fake versions of these popular websites. As I highlighted earlier in this post, look out for forged sites!

![Trusted Brands](https://images.ctfassets.net/23aumh6u8s0i/3O24gNN6nMGCFd9I4cbR0r/a5cf94640d5397ea61304c5a51c7d518/brand-logos_various)
_Source: https://thebrandthattimeforgot.files.wordpress.com_

## 5. Look out for malware and ad scams

During this season, social network scams and malware are on the increase. Lots of fake deals exist on the Internet. These fake deals, when clicked, direct you to fake sites and trick you to download, in some cases, antivirus software or software that can make you claim hot deals. In most cases, this software is malware that can steal information from your computer when installed.

Here are some tips to ensure that you are not a victim of these scams:

* Ensure that you have an up-to-date antivirus program installed on your computer.
* Ensure that your computer's operating system is up to date.
* Don't open URLs that seem suspicious.

![Social Media Scams](https://images.ctfassets.net/23aumh6u8s0i/1Dn4eRjA3sFSvrr64Hekol/02f6904560f0275fd0892df905c54008/Screen-Shot-2015-08-10-at-9)
_Source: http://adabouts.com_

You might see various ads that say **Claim this..** or **Claim that..** like the one below:

![Phishing Ad Banners](https://images.ctfassets.net/23aumh6u8s0i/5b7bSb5ZzzBFfWIEeXXgye/eca254c9097f11fe86e47d1bfeb9a8c7/Malware-2)
_Scam Ads_

## 6. Avoid deals that are too good to be true

Humans, by nature, are said to be driven by greed, so cyber attackers prey on users with this mindset by tricking users with incredible deals. During this season, various deals appear on social media that are just too good to be true. There is a popular [twelve scams of Christmas list](http://www.mcafee.com/us/about/news/2011/q4/20111109-01.aspx) compiled by McAfee. This list contains the popular examples of *too good to be true* deals. Try as much as possible to avoid deals like this!

## Aside: Stay Secure with Auth0

As a developer, you can use [Auth0 Lock](https://auth0.com/docs/libraries/lock) to authenticate your users. The lock widget uses **https** to ensure that users' information is transmitted securely.

You can also use Auth0's [Breached Password Detection](https://auth0.com/breached-passwords/) feature to ensure your users are protected from compromised credentials.

Futhermore, you can define **password policies** to customize the level of complexity of the passwords a user enters during sign-ups. Auth0 offers five levels of security matching the [OWASP password recommendations](https://www.owasp.org/index.php/Authentication_Cheat_Sheet#Implement_Proper_Password_Strength_Controls):

- **None (default)**: The password must exist and be at least one character long.
- **Low**: The password must be at least six characters long.
- **Fair**: The password must be at least eight characters long and must contain a lower case letter, an upper case letter, and a number.
- **Good**: The password must be at least eight characters long and must contain at least three of the following four characters: a lower case letter, an upper case letter, a number, or a special character (e.g. !@#$%^&*)
- **Excellent**: The password must be at least 10 characters long. It must contain no more than two identical characters in a row (e.g., "aaa" is not allowed). It must contain at least three of the following four types of characters: a lower case letter, an upper case letter, a number, and a special character (e.g. !@#$%^&*).

![Password Strength](https://images.ctfassets.net/23aumh6u8s0i/4Fi0J601exBxy5EBXti6jD/2840507af25ad497fd94a665ab872627/password-strenght)


## Conclusion

We have covered various tips on how to stay safe while shopping online on Cyber Monday. **One more tip:** *Its safer to use credit cards to shop online.* With credit cards, if there are suspicious unauthorized transactions on your card, you can contact your bank to reject the transactions and have your money refunded.

Happy safe shopping!!!


"shopping"