Password tips

Anyone associated with a church web presence usually has a slug of sites and passwords they need to remember.

Some cautions and tips for login names and passwords.

• Use a different login name for different web sites.
• Avoid using your real name as any part of your login name.
• Don't use the same password for multiple web sites. Use a different one for each.
• Make passwords strong (8 or more characters plus a mix of upper case letters, lower case letters, numerals, and symbols such as ^). Ideally, use 13 or 14 total characters.
• Don't use any part of your name, birthdate, pets names, etc. in your password -- nothing a criminal could pull from some part of the web (including a social media profile you think is "locked down").

To help you remember passwords, use a long passphrase, then adjust for the character mix as above. A password/phrase that is at least 13 characters is very hard to crack.

Example: Thyrpualptaftcmaa is the first letter of each word in the prior paragraph's first sentence. We can then adjust that and change some to characters, insert numerals, and remove a couple letters to set the total here to 14: ThYrPu^13ptae$

If you feel the need for good password manager software, stay tuned for a future post "Managing a lot of passwords".

Blogs influence traditional web sites

"Increasingly, web users also expect ordinary websites to have blog-like fresh comment and news too."
- Christian Blog Evangelism

A church with a small web site may do well to use a Blog plus a few static pages.  The free Google Blogger now lets you add up to 10 static pages to a blog.

If your church has bought a hosting package that includes RSS feeds , consider adding a teasers to them on the home page to blogs (pastor, youth director, ..)

If you have static web pages for your main site, consider adding home page links to any dynamic content you may have -- such as blogs or photos.

The Web-Empowered Church

I pulled some key points from the online video by Mark Stephenson about the Web Empowered Church (WEC) ...

The big 3 pluses of WEC

• Automate ministry processes.
• Store information for easy, immediate access.
• Connect with people anytime from anywhere in the world.

WEC Goals: expand, increase, extend

• Expand evangelism, discipleship, and care.
• Increase ministry efficiency and effectiveness.
• Extend ministry beyond the church walls.

Other points, tips, and ideas

• Web be more cost-effective communication than nearly any other media type. You can fund a web site for a year for the cost of a few mailings from the church.
• You can start with volunteers. The first 1,000 pages at the Ginghamsburg site were done by unpaid servants. The site is now at 4,000 pages, including several years' of text and video of sermons.
• You can minister to people worldwide 24 hours a day.
• You can get the word out immediately.
• Easy 24 x7 member participation (emails; online discussions -- IM, chat, discussion boards, "communities", blogs; ).
• The Web-empowered Church (with a capital C) is NOT a replacement for a physical church. The Internet cannot hug, love, or think.
• Connect people in need with those who can address the need, including requests for help in the community.
• Community Prayer Exchange (Prayer Line = one-to-one). In a community Prayer Exchange, you'll need to address the need of some people to submit a prayer request anonymously.
• "Post a thought or Prayer" -- adds to online display. This is most posted-to page on the Ginghamsburg site.
• Servant connector. List opportunities, then let people check blocks and submit -- match talents to needs.

Don't catch a "Social" disease

Social networking sites are quite popular these days. But the very nature of these sites makes them ripe for criminal activity. In order to protect both your own personal information and that of your family and friends, you'd need much tighter security and less information sharing than social networking demands.

Below are a few quotes that should make you shudder and "go very slow" if approached about your church setting up a page on a social networking service. Can you justify deliberately adding risk for your church's children and members as well as its visitors?

• "With more than 150 million members worldwide and a huge amount of data on every user, [FaceBook] is a dream come true for spammers and identity thieves." (WindowsSecrets newsletter)
• "[Facebook] site has been hit by five separate security problems in the last seven days, say security experts. ... Security firms warn that the popularity of social networking sites makes them a tempting target for hi-tech thieves." (BBC news)
• "Get used to this [Koobface worm attack]. I think we'll see a steady stream of these kinds of stories with malware propagating via social networking contacts throughout the next few years. And, given the increasingly flexible APIs the social network sites are implementing, bad guys will be able to mine this information for attacks far more effectively." (SANS Security Newsletter)
• "In an analysis of cyber crime activity in the 2nd half of 2007, security vendor Symantec Corp. found that two social networking sites [FaceBook and MySpace] together were the target of 91 percent of U.S.-based phishing Web sites." [And it will likely only get worse] (The Washington Post)

If you insist on taking personal risks with your own computer and identity and that of your family, at least consider the impact on your friends if they get infected, attacked, or scammed after visiting your web site or using the social network more extensively after visiting your site.

Churches place great emphasis on providing a "Safe Sanctuary" for children. But they leap onto FaceBook without any concern for their congregation or the visitors they hope will visit there. Taking some teens on a picnic lunch in a park is a great idea. But if that park is a known hangout for drug pushers, muggers, and rapists, we would never take them there.

Yet most churches ignore the very real (and increasing) criminal activity related to social networking sites because the sites are neat, modern, and popular. Churches need to do better at protecting our children, members, and web site visitors. Fun and fad should never trump the safety of our flock.

Maybe it's time for a "Safe Web" policy for churches. Does your church have such a policy? Does it enforce it?

The US-CERT governmental organization has issued some tips for people who just have to risk everything and have a social networking page/site. (See the US-CERT tips) These tips appear aimed at getting teenagers to be less naive about Internet use in general, but there are lots more steps that people should take. Why don't many take these steps? Because if they followed them, it would take some of the "fun" out of their (risky) surfing. Here are a few:

• Never use your real name in your email address. Give away as little information about yourself as possible.
• Use disposable email addresses when singing up at online stores or services (including social networking sites). If an address starts getting tons of Spam, you may be able to determine where it came from. You may even be able to alert a "friend" that their computer may be infected and that any email addresses on it may have been "harvested".
• Whenever possible, do not give out your real name or other information that identifies you personally.
• Do not identify other people by name, especially a full name, while online.
• Always provide the minimum required information when signing up for a service or buying a product. Don't fill in every field on a form just because it's there.
• Never "assume" that Jane Doe is really Jane Doe, even if "she" has a cute photo icon that is really her and she's using "her" email address. Anyone can copy images that appear on the web. And criminals steal email addresses all the time.
• If you want to share photos, use a photo service such as Google Photos or Flickr. Don't use a social networking site for photos. That's just one more thing the criminals can steal.
• Avoid associating personal information with online photos.
• If you really must create a social networking page, tighten the security by customizing the configuration. The social networking site usually has info on how to do that. But the default for nearly all social networking sites is very "open" and not very secure.
• Be paranoid. Be very, very paranoid. It's a good and righteous thing to be paranoid when the "bad guys" really are "out to get you"!

Is Twitter for churches?

Even Ellen Degeneres now tweets away on Twitter. Can anyone resist the urge to deluge the world with trivia about their mundane life? Who doesn't want to accumulate "followers".

Even that term makes me cringe. Should churches really want people who are "followers" of anyone other than Jesus? Are "followers" just the Greek chorus to the dreary drama of a dismal narcissist?

Jay Leno recently asked if those who use Twitter should be called "Twits". Are tweets for the birds? Is there a valid, spiritual use of Twitter? I think there is, but don't know that anyone is using it (more on this on a future post). Nearly all Twitter use I see is self-aggrandizing egotism. As a church member recently told me, "It's pretty arrogant to think that people really care about what you are doing or thinking all day" -- in 140 character or less bursts of "information".