Computer Science
Grade 9
20 min
5. Safe Browsing Practices
Learn about safe browsing practices, such as avoiding suspicious websites and being cautious about downloading files.
Tutorial Preview
1
Introduction & Learning Objectives
Learning Objectives
Identify the characteristics of secure (HTTPS) versus insecure (HTTP) websites.
Differentiate between strong and weak passwords and apply principles for creating strong passwords.
Recognize common phishing attempts in emails and on websites by analyzing their components.
Explain the purpose of browser cookies and how to manage them to enhance privacy.
Describe the risks associated with using public Wi-Fi and identify methods to mitigate them.
Evaluate the legitimacy of a software download to avoid installing malware.
Articulate the importance of keeping web browsers and plugins updated for security.
Ever clicked a link for a 'free prize' that seemed too good to be true? 🤔 Let's explore how to spot online traps and keep your digital life...
2
Key Concepts & Vocabulary
TermDefinitionExample
PhishingAn attempt by cybercriminals to trick you into revealing sensitive information (like passwords or credit card numbers) by pretending to be a trustworthy entity, often through deceptive emails or fake websites.You receive an email that looks like it's from Netflix, asking you to click a link and 'update your payment details' to avoid suspension. The link leads to a fake website that steals your information.
HTTPS (Hypertext Transfer Protocol Secure)The secure version of HTTP, the protocol that sends data between your browser and a website. The 'S' stands for 'Secure' and means your connection is encrypted, making it difficult for others to intercept your data.The URL for your school's portal starts with `https://` and sh...
3
Core Syntax & Patterns
The URL Inspection Pattern
Check for HTTPS + Padlock -> Verify Domain Name -> Scrutinize the Full Path
Before entering any personal information on a website, always check the URL. First, ensure it starts with `https://` and has a padlock icon. Second, verify the main domain name is correct and spelled properly (e.g., `amazon.com`, not `amaz0n.net`). Finally, be wary of overly long or random-looking URLs.
The 'Think Before You Click' Rule
Identify Sender -> Analyze Request -> Hover to Preview Link
Use this rule for any link you receive in an email, direct message, or see on a website. First, confirm you know and trust the sender's actual email address, not just the display name. Second, question the request—is it urgent, unexpected, or too good to b...
4 more steps in this tutorial
Sign up free to access the complete tutorial with worked examples and practice.
Sign Up Free to ContinueSample Practice Questions
Challenging
You are analyzing the URL `https://www.your-bank.com.security-check.net/login`. Despite the presence of 'https' and 'your-bank.com', why is this URL extremely dangerous?
A.The URL is too long to be secure.
B.The true domain is 'security-check.net', and 'your-bank.com' is just a subdomain designed to trick you.
C.The URL does not end in '.com'.
D.The URL uses hyphens, which are not allowed in secure domains.
Challenging
A company experiences a data breach, and its user password database is stolen. Attacker 'Eve' takes this list and successfully uses it to access 10% of those users' email accounts on a different service. This attack, known as 'credential stuffing', is only possible because of which specific failure in user practice?
A.Users chose passwords that were too short.
B.Users did not enable Two-Factor Authentication.
C.Users reused the same password across multiple websites.
D.Users did not change their passwords frequently enough.
Challenging
A friend argues, 'I don't need a VPN on public Wi-Fi because my bank's site uses HTTPS, so my connection is encrypted and safe.' Why is this reasoning dangerously incomplete?
A.HTTPS does not actually encrypt any data; it only verifies the website's identity.
B.An attacker on the network can still perform a 'man-in-the-middle' attack, potentially redirecting them to a fake HTTPS site they control.
C.Public Wi-Fi automatically disables HTTPS encryption by default.
D.Using a VPN on public Wi-Fi is actually less secure than not using one.
Want to practice and check your answers?
Sign up to access all questions with instant feedback, explanations, and progress tracking.
Start Practicing Free