In today’s society, it can be said that cybersecurity is closely related to every citizen. Nowadays, a mobile phone can make the road congestion situation clear at a glance, and you can buy pretty much everything without leaving your home. However, many technological innovations rely on the massive collection of user data, which explains why once we have searched for one particular product, we will be constantly harassed by all kinds of advertisements for that product type. The arrival of the big data era is strong and irreversible, with increasing information disclosure incidents, society is paying more and more attention to internet security issues.
在当今社会，可以说网络安全与每个公民密切相关。 如今，手机可以一目了然地看清道路拥堵情况，你几乎可以足不出家就买到所有东西。 然而，许多技术创新依赖于大量用户数据的收集，这解释了为什么一旦我们搜索了一种特定产品，我们就会不断受到该产品类型的各种广告的骚扰。 大数据时代的到来是强大而不可逆转的，随着信息泄露事件的增加，社会越来越关注互联网安全问题。
Smart Phone Apps
智能手机应用程序
Many mobile apps require various permissions such as “access to the contact list”, “access to the microphone”, “access to the camera” and so on. Such force the user to inadvertently hand over control of the mobile phone to the app. This is not necessarily harmful to the user’s privacy, but it can be threatening.
许多移动应用程序需要各种权限，如“访问联系人列表”、“访问麦克风”、“访问相机”等。 这迫使用户无意中将手机的控制权移交给应用程序。 这不一定对用户的隐私有害，但可能会造成威胁。
The Jiangsu Consumers Association has inspected more than 100 mobile phone apps; 79 could obtain rights to the user’s location, 23 could send text messages directly to contacts on the phone, 96 could send messages at will and 14 could monitor the phone conversation and terminate it. Even more frightening is that these permission acquisitions are done unconsciously. While some of these sensitive permissions that are over-acquired are the result of users not carefully reading the instructions and granting them; others were more discretely, and illegally acquired.
江苏消费者协会已经检查了100多个手机应用程序；79个可以获取用户位置的权限，23个可以直接向手机上的联系人发送短信，96个可以随时发送消息，14个可以监控电话对话并终止。 更可怕的是，这些许可的获取是无意识地完成的。 虽然其中一些过度获取的敏感权限是用户没有仔细阅读说明并授予它们的结果；但其他权限则更谨慎地非法获得。
So how do we detect if our mobile phone is being monitored? Since many application enable permissions are set to open at the phone’s startup, they are always open in the background, so their power consumption will be relatively large. In addition to checking the power consumption of apps, you can also see if there are suspicious programs that are self-starting and running in the background. In addition, you can also turn off the developer mode on your phone to partially block viruses such as Trojans. Most importantly, it is always best to only download apps from the store of the phone’s manufacturer, not a third-party app store.
那么，我们如何检测我们的手机是否被监控呢？ 由于许多应用程序启用权限设置为在手机启动时打开，它们总是在后台打开，因此它们的功耗会相对较大。 除了检查应用程序的功耗外，您还可以查看是否有在后台自动启动和运行的可疑程序。 此外，您还可以关闭手机上的开发人员模式，以部分阻止特洛伊木马等病毒。 最重要的是，最好只从手机制造商的商店下载应用程序，而不是第三方应用程序商店。
Phishing Websites
网络钓鱼网站
Phishing websites are often spread by spam, instant chat, text messages or fake advertisements on websites. For example, in the name of “Company Anniversary”, “Lucky Audience”, “Low-cost Air Tickets”, “Mobile Phone Top Up Discount”, etc., the user is tricked into filling out online forms with ID card numbers, bank accounts and other information. They also tend to imitate Alipay, online banking and other well-known websites in their attempts to infiltrate user accounts.
网络钓鱼网站通常通过垃圾邮件、即时聊天、短信或网站上的虚假广告传播。 例如，以“公司周年”、“幸运观众”、“低成本机票”、“手机充值折扣”等的名义，用户被骗用身份证号码、银行账户和其他信息填写在线表格。 他们还倾向于模仿支付宝、网上银行和其他知名网站，试图渗透用户帐户。
Therefore, be sure to pay attention to the details of websites; colour, content, links and so on. It is also important to beware sites that have been flagged for blacklisting; a secure browser will prompt as to the security threat. Moreover, the address of any payment-related website should start with “https”, while there are also icons such as locks in the address bar. Do not blindly believe in the recommendation of search engines, and do not click links in emails, WeChat, Weibo, or text messages, especially those with short addresses. Finally, we also need to carefully identify the address: For example, ICBC’s website icbc.com.cn can easily be misidentified as lcbc.com.cn, while www.microsoft.com can be confused with ww-w.Incrosoft.com.
因此，请务必注意网站的细节；颜色、内容、链接等。 小心被标记为黑名单的网站也很重要；安全浏览器会提示安全威胁。 此外，任何与支付相关的网站的地址都应以“https”开头，同时地址栏中也有锁等图标。 不要盲目相信搜索引擎的推荐，也不要点击电子邮件、微信、微博或短信中的链接，尤其是那些地址短的链接。 最后，我们还需要仔细识别地址：例如，工商银行的网站icbc.com.cn很容易被误认为lcbc.com.cn，而www.microsoft.com可能与ww-w.Incrosoft.com混淆。
Free WiFi
免费WiFi
Many public WiFi now have no password and users can connect at will. Yet, there is the possibility that such WiFi networks have been built by a hacker. After the user connects to the WiFi, the hacker can not only read various private information and files on a phone without the user’s permission, but also remotely control apps such as camera, microphone, etc.
许多公共WiFi现在没有密码，用户可以设置任何连接。 然而，这种WiFi网络有可能是由黑客建立的。 用户连接到WiFi后，黑客不仅可以在未经用户许可的情况下读取手机上的各种私人信息和文件，还可以远程控制相机、麦克风等应用程序。
Therefore, it is important to carefully identify and confirm the hotspot’s name and password with the Wi-Fi provider. If absolutely necessary, try not to use passwordless hotspots for shopping, online bank transfer, or anything involving entering sensitive personal information, etc. VPNs also provide an additional level of security. Lastly, avoid auto connecting to previously used WiFi networks to prevent the phone from inadvertently accessing the “evil twins” of legitimate Wi-Fi hotspots.
因此，与Wi-Fi提供商一起仔细识别和确认热点的名称和密码很重要。 如果绝对必要，尽量不要使用无密码热点进行购物、在线银行转账或任何涉及输入敏感个人信息等。 VPN还提供了额外的安全级别。 最后，避免自动连接到以前使用过的WiFi网络，以防止手机无意中访问合法Wi-Fi热点的“邪恶双胞胎”。
QR Codes
二维码
Due to the fact that QR codes are very easy to make, the security traps associated therewith are virtually endless. The most well-known example is shared bikes. Users need to scan the QR code on the bike in order to use it, but if another QR code (one designed to look almost identical) is pasted over the original, when a user scans the fake QR code, it is very likely that their personal information is at risk.
由于二维码非常容易制作，与之相关的安全陷阱几乎是无穷无尽的。 最著名的例子是共享自行车。 用户需要扫描自行车上的二维码才能使用它，但如果另一个二维码（设计看起来几乎相同）被粘贴在原始二维码上，当用户扫描假二维码时，他们的个人信息很可能面临风险。
Therefore, in daily life, be sure to be vigilant against various QR codes on the street. Do not scan QR codes from unknown sources, and don’t hesitate to ask a merchant to confirm the authenticity of the QR code. When scanning a payment code or making your phone available for the vendor to scan, remember to cover the phone screen while opening the QR code payment interface and try not to let others have the chance to scan the payment interface. Using fingerprints and face verification instead of passwords is also recommended.
因此，在日常生活中，一定要警惕街上的各種二維碼。 不要扫描来自未知来源的二维码，不要犹豫，要求商家确认二维码的真实性。 在扫描付款代码或提供手机供供应商扫描时，请记住在打开二维码支付界面时遮住手机屏幕，尽量不要让其他人有机会扫描支付界面。 也建议使用指纹和面部验证而不是密码。
Telecommunications Fraud
电信欺诈
When receiving strange calls related to money, most people are cautious. But what if you receive phone calls from official phone numbers, such as 10086, 110 or 120?
当接到与金钱有关的奇怪电话时，大多数人都很谨慎。 但是，如果您接到来自官方电话号码的电话，如10086、110或120怎么办？
In real life, hackers will often use such a method to disguise their phone number. We can be vigilant by hanging up immediately should the caller want to talk about bank cards, transfers, accounts, etc. Perhaps they may also send “winning” information to you through QQ, email, etc., so that you take the initiative to contact them, leading to them asking for money for postage, tax, etc. It is also possible that they may hack QQ or email accounts, to then contact the owner’s parents or friends, claiming an emergency and that the account owner is in need of money.
在现实生活中，黑客经常会用这种方法来伪装他们的电话号码。 如果来电者想谈论银行卡、转账、账户等，我们可以立即挂断电话，保持警惕。 也许他们也可能通过QQ、电子邮件等向您发送“中奖”信息，以便您主动联系他们，导致他们索要邮费、税款等。 他们也可能入侵QQ或电子邮件帐户，然后联系所有者的父母或朋友，声称有紧急情况，帐户所有者需要钱。
Face Recognition
面部识别
With the rise of verification by facial recognition, the “Face Swap” system can automatically recognise a face and reveal possible personal information such as gender and age. Yet, the the system can easily change any face to that of another person, and then there are the abundant claims that such face recognition is equally likely to pass verification.
随着面部识别验证的兴起，“换脸”系统可以自动识别人脸，并揭示可能的个人信息，如性别和年龄。 然而，该系统可以很容易地将任何面孔更改为另一个人的脸，然后有大量声称，这种人脸识别同样有可能通过验证。
These six traps are just the tip of the iceberg, while we will all of us encounter many more, often unwittingly, sometimes not until it is too late. With the rapid development of future technology and the influence of the internet era, such means are varied and change with each passing day. Vigilance therefore, remains key.
这六个陷阱只是冰山一角，而我们所有人都会遇到更多陷阱，通常是无意中，有时直到为时已晚。 随着未来技术的快速发展和互联网时代的影响，这些手段每天都在变化。 因此，警惕仍然是关键。
