各位老師、同學，大家好：

近來發現有若干師生可能因下列原因導致Email密碼外洩：
1.在國外機場、旅館飯店、教育單位等，使用免費wifi設備連網，帳號密碼遭側錄。
2.於公用電腦登入WEB MAIL系統，帳號密碼遭側錄。
3.註冊報名研討會或其他會議時，使用與電子郵件相同的密碼，而該報名系統之帳號密碼檔遭外洩或盜取。
4.註冊其他商業網站、購物網站、其他網站等，使用與電子郵件相同的密碼，而該網站系統之帳號密碼檔遭外洩或盜取。
5.其他：請注意自己電子郵件登入紀錄，是否有不明IP登入成功的紀錄；若Email密碼遭竊取，駭客可能會用來發送詐騙信件或觀看您來往的信件，請大家千萬小心!!!

下列幾點，可盡量避免密碼被盜的狀況：
   A.定期更換密碼。(建議三個月內或出國回校後，可免除密碼已被竊取的問題)
   B.不同網站，使用不同的密碼且密碼不要相似。(密碼過多，可用筆記本紀錄)
   C.盡量不使用公用電腦或他人電腦登入系統，若不得已使用，須事後更換密碼。
   D.不要開啟跟自己業務或學業無關的信件，更不要下載執行夾帶的檔案。
   E.定期(建議每周)備份自己重要的信件及聯絡人。
   F.不要下載、安裝、使用不合法規的軟體，有些盜版軟體、外掛軟體會遠端盜取帳密或檔案。

遇到可疑的信件，可與電子計算機中心資安同仁通報處理。
游順發組長　6209　rogeryu@mail.ntust.edu.tw
張云蘋　　　6929　applechang@mail.ntust.edu.tw

【Security】Email password protection precautions.

Hello everyone：

Recently, we've discovered that some teachers and students may have had their email passwords compromised due to the following reasons:
1. Using free Wi-Fi at airports, hotels, educational institutions, etc. abroad, where your account and password may have been recorded.
2. Logging into a webmail system from a public computer, where your account and password may have been recorded.
3. Using the same password as your email when registering for a seminar or other conference, where the registration system's account and password file may have been compromised or stolen.
4. Using the same password as your email when registering for other commercial websites, shopping sites, or other websites, where the website's account and password file may have been compromised or stolen.
5. Other: Please monitor your email login history for any successful logins from unknown IP addresses. If your email password is compromised, hackers may use it to send scam emails or access your emails. Please be extremely cautious!

The following points can help minimize password theft:
   A. Change your password regularly. (It is recommended to do this within three months or after returning to campus after studying abroad to avoid the risk of password theft.)
   B. Use different passwords for different websites, and avoid duplicate passwords. (If you have too many passwords, keep a notebook to keep track of them.)
   C. Avoid using public computers or other people's computers to log in. If you must, change your password afterward.
   D. Do not open emails unrelated to your work or studies, and do not download or execute files that contain stolen content.
   E. Back up your important emails and contacts regularly (weekly is recommended).
   F. Do not download, install, or use illegal software. Some pirated software and plug-ins can remotely steal passwords or files.

For more question about information security, please directly consult with Computer Center, at rogeryu@mail.ntust.edu.tw or applechang@mail.ntust.edu.tw