I just wanted to correct what the Author Liz Cornwell published about computer myths. I'm sorry to inform all you concerned and responsible security buffs, but #4 is a FACT and not a myth. A hacker can access your computer even if you have powered it off. In most system BIOS's one can schedule a power on and power off time. (Award, Phoenix, and BioStar). There are a few ways a hacker can access a remote BIOS. A hacker can as well schedule a task, writes a script, or cmdlet using CMD line or IDE PowerShell on compromised system to schedule your pc to power up without your knowdledge. Ie, you turn your system off before you go to sleep and you go to bed at 1030 every night; thehacker knows this and uses amethod listed and sets your pc to powerup at midnight from a remote location and uses your computer until 5 am and shuts down before you wake up. You check and see that your pc is off and are unaware . My advice (I have bchlor degree in Network Security) is to unplug pc every night if you are that paranoid, but I promise eveyone that just because you turn off your pc doensn't mean it's safe. If you have a PHOENIX, AWARD, or BIOSTAR BIOS, just access setup option and make sure that your pc isn't sceduled to start up and run tasks because it is common especially in the early am. that is when most computers are off or idle.
@ J.R. Minard, while some of the points seems valid I still don't believe that a hacker can remotely access your computer at least not in the way most people would understand anyway.
Here are the reasons:
1. I know of the ability of common BIOS feature of being able to automatically turn on your computer at a specific time. But how many people actually use the feature and how many common folk use it? I will assume not many.
2. I am also you are assuming the those people that do use this feature either don't use a password on their computers or set their computer to automatically log on using a known password. Again not many people would be doing this especially average folk (of course there are exceptions) And this itself is a security vulnerability how safe is it to allow a computer to automatically turn on and log onto a predetermined account!
3. When we mean remote most people (including me) are usually thinking of via the internet or wirelessly. Which is perhaps the hardest way of gaining access to a computer that is already turned off. BUT there is a known way that a computer within the network may be able to perform this attack (but I won't mention how :) ) But this would not normally be thought of as remote especially when referring to hackers trying to get into your system, unless they have already compromised one system and want to access others.
4. If I understand the hack correctly there is still the barrier that a certain
function needs to be activated in the computer for this to happen and usually this function is disabled by default. (You know what I mean hint:Tinker Bell) But the function may be enabled in some environments (AFIAK)
If it happens that I am wrong then God help us all! :)