How Much Is It ESL Questions

Chapter 7 Study Guide Answers What does the Bill of Rights do? The Bill of Rights lists our basic rights. Who is the person mainly responsible for the Bill of Rights? James Madison is the person mainly responsible for the Bill of Rights. The Bill of Rights is part of which document? The Bill of Rights is part of the United States Constitution. Whose job is it to protect our rights listed in the bill of rights? It is the job of the federal courts (judicial branch) to protect our rights. What are the five rights listed in the first amendment? Freedom of speech: includes symbolic speech; does not include speech that could endanger the public safety. Religion: Right to believe whatever you want, but you can’t do whatever you want in the name of religion (can’t break the law). Press: The free flow of information and ideas; can’t print lies or information that could be helpful to an enemy in wartime. Assembly: Use public property for meetings and demonstrations (i.e. parades, protests, political rallies). Must be done legally and peaceably. Right to petition: Means you can appeal to the government if you’re unhappy about something or some policy. Give one example of speech NOT protected under the first amendment. An example of speech not protected under the first amendment would be crying “fire” in a crowded movie theater (anything that could potentially endanger the public safety). What does the second amendment give us the right to? The second amendment gives us the right to bear arms. What does the third amendment state we are not legally obligated to do? Under the third amendment, we are not obligated to quarter (or house) soldiers in our homes. What does the fourth amendment protect us from? The fourth amendment protects us from unreasonable search and seizure. What is needed in order to search or seize property? A warrant is needed, which must be issued by a judge, in order to search and seize property. What five rights are we guaranteed under the Fifth Amendment? Right to a grand jury: determines whether or not the government has enough evidence to bring someone to trial. Double jeopardy: Once a person has been found not guilty, he cannot be tried again for the same crime. Self incrimination: A person has the right to remain silent; he does not have to testify against himself. Due process: The government must follow a clear set of rules (a process) as it carries out the law and takes your life, liberty, or property. Just compensation: If the government has to take someone’s land, they will offer a fair price. What is the right stated in the “Miranda Warning”? The main right stated in the “Miranda Warning” is the right to remain silent. What are the four rights stated under the sixth amendment? Right to a speedy and public trial, and an impartial jury. Right to a jury of people that live in the defendant’s area (jury of your peers). To hear and question all witnesses Right to an attorney As stated in the seventh amendment, we have the right to which type of trial depending on how much money a person is being sued for? What can a judge NOT do? Under the seventh amendment, we have the right to a jury trial depending on how much money is at stake in a civil trial. A judge cannot overturn a decision made by a jury. What are the four things that are prohibited under the eighth amendment? The four things that are prohibited (or not allowed) under the eighth amendment are: excessive fines, excessive bail, cruel and unusual punishments, and poor prison conditions. Under the ninth amendment, rights not listed in the Bill of Rights belong to whom? According to the ninth amendment, rights not listed in the Bill of Rights belong to the people. The tenth amendment states that powers not given to the national government are reserved for whom? According to the tenth amendment, powers not specifically given to the national government are reserved for the people and the states. What is meant by the term “double jeopardy”? The term “double Jeopardy” refers to a person being retried for a crime in which he has already been acquitted, or found “not guilty”. What does it mean to be indicted by a grand jury? To be indicted by a grand jury means that a person will be going to trial and will retain all of the rights listed in the fifth, sixth, seventh, and eighth amendments.

Can you put a little lettuce in my sandwich? "A little" is correct because it refers to a small amount of an uncountable noun (lettuce) These earrings aren't my / mine. They may be Jenny's. "Mine" is correct as it's the possessive pronoun form of "my" There isn't much / many honey left. "Much" is correct because "honey" is an uncountable noun All of these paintings are nice, but the ones / one on the right is my favourite. "One" is correct because it refers to a single painting (singular) This organisation helps lots of / a lot people in need. "A lot" is the correct expression for "many" in this context I don't like these sandals. I'd like to try on the black ones / one over there. "Ones" is correct because it refers to multiple sandals (plural) I often hang out with a few / a little of my teammates after football practice. "A few" is correct when referring to countable nouns (teammates) These are my gloves, not Nancy's. Her / Hers are over there, on the table. "Hers" is the correct possessive pronoun form There aren't many / much recycling bins in our neighbourhood. "Many" is correct because "recycling bins" are countable nouns How many / How much orange juice do you drink every day? "How much" is correct because "orange juice" is an uncountable noun

Animal Rights and Diet Success Criteria I can explain key terms which describe the type of diets people have I can explain the advantages and disadvantages of different types of diet Animal Rights and Diet Match up the terms with the meaning Term Meaning Omnivore - eats fish but no other type of meat Vegetarian - eats most types of meat and vegetables Pescetarian - doesn’t eat any products that come from animals Vegan - doesn’t eat meat but will eat dairy products like milk Place the different diets on a spectrum All meat No animal products at all Vegetarian Vegan Omnivore Pescetarian Omnivore Omnivore Most people in the UK are omnivores Match the countries with the amount of meat eaten per person per year Country Meat per person per year India 9.9 kg USA 4.4 kg Bangladesh 120 kg UK 111.5kg Nepal 84.2 kg Australia 4 kg Numeracy How much meat is consumed in the UK per year? (Amount of meat eaten X the UK population) 2. How much meat is consumed in Bangladesh per year? (Amount of meat eaten X the Bangladesh population) Country Meat per person per year USA 120 kg Australia 111.5kg UK 84.2 kg Nepal 9.9 kg India 4.4 kg Bangladesh 4 kg UK – 64 million Bangladesh – 165 million http://www.telegraph.co.uk/travel/maps-and-graphics/world-according-to-meat-consumption/ 7 Why do people eat meat? Discuss Tradition (their family has always done it) Culture (celebrations) Taste Convenience Nutrients such as B12, protein and iron Consumption of meat is rising across developing countries because higher incomes generally mean more meat eating. Pescetarian "Yeah, I'm a vegetarian." "But that looks like fish you're eating." "Oh yeah, I eat fish.“ An estimated 5% - 6% of people in the UK are pescetarians. How many people is this? Approx. 3.6 million Calculation – 66,000,000 /100 x 5.5 = 3,630,000 9 Which group is cuter? Animals Fish 10 People often don’t feel as much love for fish as they do for fluffy, cute mammals. The may think fish don’t feel pain. They may be fussy. They think fish isn’t meat. Not farmed as much as mammals; can be wild. To get nutrients they wouldn’t get from just vegetables and grains. (Omega 3 is in plants but in higher concentrations in oily fish) Why are people pescetarians? https://www.vegsoc.org/sslpage.aspx?pid=753 http://articles.mercola.com/omega-3.aspx Fish – In a perfect world, fish can provide you all the omega-3s you need. Unfortunately, the vast majority of the fish supply is now heavily tainted with industrial toxins and pollutants, such as heavy metals which include mercury, lead, arsenic, and cadmium, PCBs, and radioactive poisons. These toxins make eating fish no longer recommended. 11 Vegetarianism Vegetarians will not eat any meat or product that comes from the slaughter of animals e.g. gelatine. About 3% of the UK population are vegetarian. How many people is this? 1.9 million 12 Why are people vegetarian? They don’t like the idea that animals are killed so they can eat Health reasons Don’t like meat Brought up vegetarian Environmental reasons Religious reasons (e.g. some Buddhist, Hindus) Watch the following clip twice. The second time, write down the fact which surprises you the most. https://www.youtube.com/watch?v=VW6wfpHFdaI The World Health Organization has classified processed meats – including ham, salami, sausages and hot dogs – as a Group 1 carcinogen (same as smoking/alcohol) which means that there is strong evidence that processed meats cause cancer. Red meat, such as beef, lamb and pork has been classified as a 'probable' cause of cancer. 13 Veganism Not just a diet Around 1% of the population of UK are vegans. A vegan is described by the Vegan Society as “a philosophy and way of living which seeks to exclude—as far as is possible and practicable—all forms of exploitation of, and cruelty to, animals for food, clothing or any other purpose; and by extension, promotes the development and use of animal-free alternatives for the benefit of humans, animals and the environment. In dietary terms it denotes the practice of dispensing with all products derived wholly or partly from animals” Why are people vegan? Why are people vegan? James Aspey: https://www.youtube.com/watch?v=a22XxXP3nU8 Warning: some of the content in this video clip may upset some viewers from 7:14 – 8:11 https://www.youtube.com/watch?v=BtqXeym7H8A Why are people vegan? “Don’t want bad karma” Feel healthier Reduce chances of diseases. Example heart disease. Don’t want to exploit animals Believe in animal rights Sustainability Environment Create a Table of Pros & Cons of Veganism Pros √ Cons - Create a Table of Pros & Cons of Veganism Pros Cons No animals have died for you to eat Some people think it is healthier Help the environment Fewer antibiotics/chemicals that are given to some animals Makes you feel good No vitamin B12 so have to supplement Harder to find food at shops or restaurants May be harder to get enough iron May be more expensive to get substitute meats Judged by family and friends Could put farmers out of business Group Work Source 1 Summarise it in your jotter Explain what the source is/what it says What does it suggest? What is your opinion? Feedback to rest of class https://www.youtube.com/watch?v=SYyjel5VuHg Farmer’s Poem

1. Which factor is most crucial to verify first when selecting an ICT resource for instruction? A) Content alignment with the textbook B) Alignment with learning objectives C) The resource's popularity among peers D) Cost-effectiveness of the resource 2. When evaluating ICT resources, what is the purpose of checking cultural relevance? A) Ensuring it aligns with current trends B) Making sure it's accessible to all students C) Reflecting the diverse backgrounds of students D) Avoiding resources that are too complex 3. Which key aspect determines the accessibility of an ICT resource? A) How popular the resource is with students B) Its compatibility with existing technology C) Cost of using the resource D) Engagement levels it provides 4. In assessing content quality, why is accuracy important? A) To make resources easier to use B) To ensure alignment with curriculum standards C) To enhance visual appeal D) To provide a more engaging experience 5. Why is it essential for an ICT resource to offer interactivity? A) To improve download speeds B) To promote active learning and engagement C) To meet all technical requirements D) To minimize costs associated with the resource 6. What should be assessed regarding the usability of an ICT resource? A) How much it costs compared to other resources B) How easily students can navigate and use it C) How interactive it is D) Its level of engagement 7. Which of the following best describes the importance of feedback mechanisms in ICT resources? A) They reduce the need for grading B) They allow for automatic updates C) They provide immediate feedback to enhance learning D) They increase the cost-effectiveness of the resource 8. What is an advantage of resources that are scalable and flexible? A) They can adapt to different class sizes or teaching methods B) They are often free C) They do not require technical support D) They are easier to assess 9. Which tool would you use to gain structured feedback from students about an ICT resource? A) Rubrics B) Peer reviews C) Online review platforms D) Student feedback 10. When is a checklist most beneficial in evaluating an ICT resource? A) To provide structured guidelines for scoring B) For highlighting key features and requirements C) To measure student engagement D) To analyze technical support needs 11. Which of these tools helps teachers gather insights from colleagues on a resource's effectiveness? A) Online review platforms B) Student feedback C) Peer review D) Rubrics 12. In the planning stage, how can ICT benefit lesson development? A) By providing only audio resources B) By assisting in research for updated content C) By reducing the need for lesson objectives D) By limiting content access 13. During content delivery, how does ICT enhance the lesson experience? A) By allowing remote control of student devices B) By adding interactivity and visual elements C) By only focusing on text-based resources D) By limiting engagement 14. What is a key advantage of using ICT-based assessment tools? A) Reducing the need for reflection B) Tracking student progress and providing feedback C) Replacing lesson objectives D) Focusing solely on multiple-choice questions 15. Which ICT feature is most beneficial in the reflection stage of a lesson? A) Technical support options B) Feedback mechanisms for immediate assessment C) Tools for students to document learning, like online portfolios D) Interactive quizzes 16. How does ICT aid in skill development? A) By encouraging only memorization B) By fostering digital literacy and critical thinking C) By minimizing interactions with the teacher D) By restricting content variety 17. What does a cost-effective ICT resource entail? A) Being free of charge for all students B) Offering a good balance of educational value and cost C) Having the most features available D) Minimizing interactivity to reduce expenses 18. Why is teacher training crucial in ICT integration? A) To learn troubleshooting for technical issues B) To help only in the planning stage C) To reduce the need for ICT support D) To assess the cultural relevance of ICT tools 19. What challenge might schools face in accessing ICT resources? A) Lack of teacher motivation B) Availability of devices and internet connectivity C) High levels of student engagement D) Excessive interactivity 20. Why should teachers regularly evaluate the ICT resources they use? A) To determine if students enjoy using them B) To assess cost-effectiveness only C) To ensure resources remain effective and up-to-date D) To simplify lesson planning

Shopping 1. a shop assistant - продавець в магазині 2. a customer - покупець 3. a fitting room - примірочна 4. a receipt - чек 5. How can I help you?/May I help you? - Як я можу вам допомогти?/Чи можу я вам допомогти? 6. Excuse me, I am looking for ... - Вибачте, я шукаю … 7. How much is this? - Скільки це коштує? 8. I’ll take it. - Я візьму це. 9. Can I try it on? - Чи можу я це приміряти? 10. Have you got it in a different color/size? - Чи є у вас це в іншому кольорі/розмірі? 1. to go shopping - ходити по магазинах 2. to shop online - купувати онлайн 3. to pay - платити 4. to spend - витрачати 5. a price - ціна 6. a discount - знижка 7. a shopping list - список покупок 8. a shop window - вітрина магазину 9. These boots are 50 percent off. - На ці черевики знижка 50%. 10. expensive - дорогий 11. cheap - дешевий

“There’s No Such Thing as Sound Science” by By Christie Aschwanden was a lead science writer for FiveThirtyEight. FiveThirtyEight, Science, Dec. 6, 2017 Science is being turned against itself. For decades, its twin ideals of transparency and rigor have been weaponized by those who disagree with results produced by the scientific method. Under the Trump administration, that fight has ramped up again. In a move ostensibly meant to reduce conflicts of interest, Environmental Protection Agency Administrator Scott Pruitt has removed a number of scientists from advisory panels and replaced some of them with representatives from industries that the agency regulates. Like many in the Trump administration, Pruitt has also cast doubt on the reliability of climate science. For instance, in an interview with CNBC, Pruitt said that “measuring with precision human activity on the climate is something very challenging to do.” Similarly, Trump’s pick to head NASA, an agency that oversees a large portion the nation’s climate research, has insisted that research into human influence on climate lacks certainty, and he falsely claimed that “global temperatures stopped rising 10 years ago.” Kathleen Hartnett White, Trump’s nominee to head the White House Council on Environmental Quality, said in a Senate hearing last month that she thinks we “need to have more precise explanations of the human role and the natural role” in climate change. The same entreaties crop up again and again: We need to root out conflicts. We need more precise evidence. What makes these arguments so powerful is that they sound quite similar to the points raised by proponents of a very different call for change that’s coming from within science. This other movement strives to produce more robust, reproducible findings. Despite having dissimilar goals, the two forces espouse principles that look surprisingly alike: Science needs to be transparent. Results and methods should be openly shared so that outside researchers can independently reproduce and validate them. The methods used to collect and analyze data should be rigorous and clear, and conclusions must be supported by evidence. These are the arguments underlying an “open science” reform movement that was created, in part, as a response to a “reproducibility crisis” that has struck some fields of science.1 But they’re also used as talking points by politicians who are working to make it more difficult for the EPA and other federal agencies to use science in their regulatory decision-making, under the guise of basing policy on “sound science.” Science’s virtues are being wielded against it. What distinguishes the two calls for transparency is intent: Whereas the “open science” movement aims to make science more reliable, reproducible and robust, proponents of “sound science” have historically worked to amplify uncertainty, create doubt and undermine scientific discoveries that threaten their interests. “Our criticisms are founded in a confidence in science,” said Steven Goodman, co-director of the Meta-Research Innovation Center at Stanford and a proponent of open science. “That’s a fundamental difference — we’re critiquing science to make it better. Others are critiquing it to devalue the approach itself.” Calls to base public policy on “sound science” seem unassailable if you don’t know the term’s history. The phrase was adopted by the tobacco industry in the 1990s to counteract mounting evidence linking secondhand smoke to cancer. A 1992 Environmental Protection Agency report identified secondhand smoke as a human carcinogen, and Philip Morris responded by launching an initiative to promote what it called “sound science.” In an internal memo, Philip Morris vice president of corporate affairs Ellen Merlo wrote that the program was designed to “discredit the EPA report,” “prevent states and cities, as well as businesses from passing smoking bans” and “proactively” pass legislation to help their cause. The sound science tactic exploits a fundamental feature of the scientific process: Science does not produce absolute certainty. Contrary to how it’s sometimes represented to the public, science is not a magic wand that turns everything it touches to truth. Instead, it’s a process of uncertainty reduction, much like a game of 20 Questions. Any given study can rarely answer more than one question at a time, and each study usually raises a bunch of new questions in the process of answering old ones. “Science is a process rather than an answer,” said psychologist Alison Ledgerwood of the University of California, Davis. Every answer is provisional and subject to change in the face of new evidence. It’s not entirely correct to say that “this study proves this fact,” Ledgerwood said. “We should be talking instead about how science increases or decreases our confidence in something.” The tobacco industry’s brilliant tactic was to turn this baked-in uncertainty against the scientific enterprise itself. While insisting that they merely wanted to ensure that public policy was based on sound science, tobacco companies defined the term in a way that ensured that no science could ever be sound enough. The only sound science was certain science, which is an impossible standard to achieve. “Doubt is our product,” wrote one employee of the Brown & Williamson tobacco company in a 1969 internal memo. The note went on to say that doubt “is the best means of competing with the ‘body of fact’” and “establishing a controversy.” These strategies for undermining inconvenient science were so effective that they’ve served as a sort of playbook for industry interests ever since, said Stanford University science historian Robert Proctor. The sound science push is no longer just Philip Morris sowing doubt about the links between cigarettes and cancer. It’s also a 1998 action plan by the American Petroleum Institute, Chevron and Exxon Mobil to “install uncertainty” about the link between greenhouse gas emissions and climate change. It’s industry-funded groups’ late-1990s effort to question the science the EPA was using to set fine-particle-pollution air-quality standards that the industry didn’t want. And then there was the more recent effort by Dow Chemical to insist on more scientific certainty before banning a pesticide that the EPA’s scientists had deemed risky to children. Now comes a move by the Trump administration’s EPA to repeal a 2015 rule on wetlands protection by disregarding particular studies. (To name just a few examples.) Doubt merchants aren’t pushing for knowledge, they’re practicing what Proctor has dubbed “agnogenesis” — the intentional manufacture of ignorance. This ignorance isn’t simply the absence of knowing something; it’s a lack of comprehension deliberately created by agents who don’t want you to know, Proctor said.2 In the hands of doubt-makers, transparency becomes a rhetorical move. “It’s really difficult as a scientist or policy maker to make a stand against transparency and openness, because well, who would be against it?” said Karen Levy, researcher on information science at Cornell University. But at the same time, “you can couch everything in the language of transparency and it becomes a powerful weapon.” For instance, when the EPA was preparing to set new limits on particulate pollution in the 1990s, industry groups pushed back against the research and demanded access to primary data (including records that researchers had promised participants would remain confidential) and a reanalysis of the evidence. Their calls succeeded and a new analysis was performed. The reanalysis essentially confirmed the original conclusions, but the process of conducting it delayed the implementation of regulations and cost researchers time and money. Delay is a time-tested strategy. “Gridlock is the greatest friend a global warming skeptic has,” said Marc Morano, a prominent critic of global warming research and the executive director of ClimateDepot.com, in the documentary “Merchants of Doubt” (based on the book by the same name). Morano’s site is a project of the Committee for a Constructive Tomorrow, which has received funding from the oil and gas industry. “We’re the negative force. We’re just trying to stop stuff.” Some of these ploys are getting a fresh boost from Congress. The Data Quality Act (also known as the Information Quality Act) was reportedly written by an industry lobbyist and quietly passed as part of an appropriations bill in 2000. The rule mandates that federal agencies ensure the “quality, objectivity, utility, and integrity of information” that they disseminate, though it does little to define what these terms mean. The law also provides a mechanism for citizens and groups to challenge information that they deem inaccurate, including science that they disagree with. “It was passed in this very quiet way with no explicit debate about it — that should tell you a lot about the real goals,” Levy said. But what’s most telling about the Data Quality Act is how it’s been used, Levy said. A 2004 Washington Post analysis found that in the 20 months following its implementation, the act was repeatedly used by industry groups to push back against proposed regulations and bog down the decision-making process. Instead of deploying transparency as a fundamental principle that applies to all science, these interests have used transparency as a weapon to attack very particular findings that they would like to eradicate. Now Congress is considering another way to legislate how science is used. The Honest Act, a bill sponsored by Rep. Lamar Smith of Texas,3 is another example of what Levy calls a “Trojan horse” law that uses the language of transparency as a cover to achieve other political goals. Smith’s legislation would severely limit the kind of evidence the EPA could use for decision-making. Only studies whose raw data and computer codes were publicly available would be allowed for consideration. That might sound perfectly reasonable, and in many cases it is, Goodman said. But sometimes there are good reasons why researchers can’t conform to these rules, like when the data contains confidential or sensitive medical information.4 Critics, which include more than a dozen scientific organizations, argue that, in practice, the rules would prevent many studies from being considered in EPA reviews.5 It might seem like an easy task to sort good science from bad, but in reality it’s not so simple. “There’s a misplaced idea that we can definitively distinguish the good from the not-good science, but it’s all a matter of degree,” said Brian Nosek, executive director of the Center for Open Science. “There is no perfect study.” Requiring regulators to wait until they have (nonexistent) perfect evidence is essentially “a way of saying, ‘We don’t want to use evidence for our decision-making,’” Nosek said. Most scientific controversies aren’t about science at all, and once the sides are drawn, more data is unlikely to bring opponents into agreement. Michael Carolan, who researches the sociology of technology and scientific knowledge at Colorado State University, wrote in a 2008 paper about why objective knowledge is not enough to resolve environmental controversies. “While these controversies may appear on the surface to rest on disputed questions of fact, beneath often reside differing positions of value; values that can give shape to differing understandings of what ‘the facts’ are.” What’s needed in these cases isn’t more or better science, but mechanisms to bring those hidden values to the forefront of the discussion so that they can be debated transparently. “As long as we continue down this unabashedly naive road about what science is, and what it is capable of doing, we will continue to fail to reach any sort of meaningful consensus on these matters,” Carolan writes. The dispute over tobacco was never about the science of cigarettes’ link to cancer. It was about whether companies have the right to sell dangerous products and, if so, what obligations they have to the consumers who purchased them. Similarly, the debate over climate change isn’t about whether our planet is heating, but about how much responsibility each country and person bears for stopping it. While researching her book “Merchants of Doubt,” science historian Naomi Oreskes found that some of the same people who were defending the tobacco industry as scientific experts were also receiving industry money to deny the role of human activity in global warming. What these issues had in common, she realized, was that they all involved the need for government action. “None of this is about the science. All of this is a political debate about the role of government,” she said in the documentary. These controversies are really about values, not scientific facts, and acknowledging that would allow us to have more truthful and productive debates. What would that look like in practice? Instead of cherry-picking evidence to support a particular view (and insisting that the science points to a desired action), the various sides could lay out the values they are using to assess the evidence. For instance, in Europe, many decisions are guided by the precautionary principle — a system that values caution in the face of uncertainty and says that when the risks are unclear, it should be up to industries to show that their products and processes are not harmful, rather than requiring the government to prove that they are harmful before they can be regulated. By contrast, U.S. agencies tend to wait for strong evidence of harm before issuing regulations. Both approaches have critics, but the difference between them comes down to priorities: Is it better to exercise caution at the risk of burdening companies and perhaps the economy, or is it more important to avoid potential economic downsides even if it means that sometimes a harmful product or industrial process goes unregulated? In other words, under what circumstances do we agree to act on a risk? How certain do we need to be that the risk is real, and how many people would need to be at risk, and how costly is it to reduce that risk? Those are moral questions, not scientific ones, and openly discussing and identifying these kinds of judgment calls would lead to a more honest debate. Science matters, and we need to do it as rigorously as possible. But science can’t tell us how risky is too risky to allow products like cigarettes or potentially harmful pesticides to be sold — those are value judgements that only humans can make.

How is personal data collected? There are several ways that an unauthorised person can try and collect your data. These include: •phishing •smishing •vishing •pharming. Phishing Phishing is when a person sends a legitimate looking email to a user. The email contains a link to a website that also looks legitimate. The user is encouraged to click the link and to input personal data into a form on the website. The email could also simply ask the user to reply to the email with their personal data. The user is tricked into giving their personal data to a source that they believe is legitimate. However, both the email and the linked website are from a fake unauthorised source. The personal data that is input is then collected by an unauthorised person. This person can then use this data for criminal acts, for example, to commit fraud or steal the person's identity. Intimidation has become a common feature of phishing emails, threatening the user that they must click the link and rectify a situation immediately, or there will be a further issue. The aim of a phishing attack is to steal the user's personal data. Figure 5.1: Phishing. A real-life example of phishing PayPal have been the subject of several different phishing emails. Users receive an email that looks as though it has been sent from PayPal, as it has the PayPal branding. The email normally warns of an issue such as unexpected activity on their account, or that some kind of verification of their account is required. The user is then asked to click a link to log into their account and resolve the issue. The link takes them to a webpage that looks like the PayPal login page. If the user inputs their login details into this page, they will not be taken to their account. It is often at this stage that the user may realise that the email and webpage are fake. However, they have already given the unauthorised person their PayPal login details. Figure 5.2: An example of a phishing email claiming to be from PayPal. How to recognise phishing There are several guidelines to be aware of regarding emails to avoid being subjected to phishing. These include: •Don't even open an email that is not from a sender that you recognise or a trusted source. •Legitimate companies will never ask you for your personal data using email. Be immediately suspicious of any email that requests your personal data. •Legitimate companies will normally address you by your name. Be suspicious of any email that addresses you as ‘Dear Member' or ‘Dear Customer'. •Legitimate companies will send an email that uses their domain name. If you hover your mouse over the sender's name, it will show the email address that the email is sent from. If this does not look legitimate, for example, does not contain the correct domain name, then it is probably fake. For example, if the sender's email is user@paypal1.com rather than user@paypal.com, this is from an incorrect domain name. •Legitimate companies are protective of their professional reputation and thoroughly check any communications. They will make sure that all information given is grammatically and correctly spelt. Be suspicious of any email that contains bad grammar or spelling mistakes. •A link in an email from a legitimate company will also normally contain the domain name of the company. You can sometimes hover over the link, or right click and inspect the link, to see the address of the URL that is attached. If the URL does not contain the domain name, or also contains typical errors such as spelling mistakes, then be suspicious of this. PRACTICAL ACTIVITY 5.02 Ask a friend or a member of your family if they have ever received an email that they believed was a phishing email. Ask them how they identified it was phishing. Ask them if they know all of the given guidelines for identifying phishing emails. Smishing Smishing (or SMS phishing) is a variant of phishing that uses SMS text messages to lure the user into providing their personal details. The user is sent an SMS text message that either contains a link to a website, in the same way that phishing does, or it will ask the user to call a telephone number to resolve an urgent issue. The same advice can be followed for smishing as given for phishing. The user must question at all times any links that are sent from an unknown or suspicious user. It is advisable that if a user believes the message may be legitimate, to type in the domain name for the legitimate company website into their web browser, rather than following the link in the message. Users should block any numbers that they believe are suspicious to prevent any further risk of smishing from that number. Figure 5.3: Smishing. Vishing Vishing (or voice phishing) has the same aim as phishing, to obtain a user's personal details. The user receives a telephone call that could either be an automated system or could be a real person. An automated voice could speak to the user and advise them that an issue has occurred, such as there has been suspicious activity regarding their bank account. The user may then be asked to call another number, or just to simply press a digit and be directed to another automated system. This system will ask them to provide their bank account details to resolve the issue. The bank account details have then been obtained by the unauthorised user and can be used to commit a crime against the user. The automated system could be replaced by a real person who will try to do the same thing. They will try to convince the user that there has been an issue with an account they have and to provide the log-in details or PIN for the account to verify who they are so the issue can be resolved. The precaution to take for vishing is that no company will ever call you and ask you to provide any log-in details or PIN details over the telephone. They may ask you to provide other personal information, and if you are in doubt that the person on the other end of the phone is legitimate, it is always advisable to put the phone down and call the company back on a legitimate number that you may already know or can obtain. Figure 5.4: Vishing. Pharming Pharming is when an unauthorised user installs malicious code on a person's hard drive or server. The malicious code is designed to redirect a user to a fake website when they type in the address of a legitimate one. The fake website is designed to look like the legitimate one, to trick the user and make sure they are not aware that their request has been redirected. The user will then enter their personal details into the fake website, believing it is the legitimate one, and the unauthorised person will now have their personal data. A common technique used in pharming is called domain name server (DNS) cache poisoning. This technique exploits vulnerabilities in the DNS and diverts the internet traffic intended for a legitimate server toward a fake one instead. The unauthorised user needs to find a way to install the malicious code on the computer. They often hide the malicious code in an email attachment or link. When the user opens the email attachment or clicks the link, the malicious code is downloaded also. Figure 5.5: Pharming. The aim of a pharming attack is also to steal a user's personal data. A real-life example of pharming In 2007 50 different companies all over the world were subject to a pharming attack, these included PayPal, eBay, Barclays bank and American Express. Over a three-day period, hackers managed to infect over 1000 PCs a day with a malicious pharming code. When users who had been infected visited the websites of the different companies, they were redirected to a legitimate-looking version of the site that was designed to steal their personal data. The original email, containing the malicious code, was set up to look like a shocking news story. Users were encouraged to click a link in the email to find out more information. The code was downloaded when the user clicked the link. This was quite a sophisticated attack that required legitimate looking websites to be set up for a large number of companies. It is not known how much money the hackers were able to retrieve as a result. How to prevent pharming All of the guidelines to avoid being subjected to phishing are also relevant for recognising pharming. There are also several other precautions that can be taken to check for pharming attacks. These include: •Have a firewall installed and operational. A firewall monitors incoming and outgoing traffic from your computer. It checks this traffic against set criteria and will flag and stop any traffic that does not meet the criteria. A firewall could detect and block suspicious traffic, such as a malicious code trying to enter your system. •Have an anti-virus program installed that is designed to detect malicious pharming code. You need to scan your computer on a regular basis to check for any malicious code. It is advisable to set up an automatic scan on a daily basis at a time when your computer will normally be switched on. •Be aware when using public Wi-Fi connections. A hacker could look to directly access your computer and install the malicious code if you are connected to a public Wi-Fi connection. It is often advisable to use a VPN when using public Wi-Fi. This will help shield your internet activity and personal details from a hacker, making it more difficult for them to access your computer. Smishing can also be used as a form of pharming. A user is sent a link, that when they click is designed to download malware onto their mobile device. Therefore, it is advisable to have security software installed on your mobile and also scan it regularly to detect any presence of malware.

Related quizzes

Related quizzes