Quote:
Originally Posted by Malice Black
CCleaner - Check
|
I forgot about that one (in this thread but not in a different security guide I wrote), and I'll add it just in case, though I think it's not a critical element, albeit a very practical little tool.
Quote:
Originally Posted by Dylananimus
Cautionary tale follows....
snip
Moral? Put everything you possibly can on your computer to keep it safe...and DO NOT forget to scan every day. Yes, every day. Especially if you use IE.
|
Very nice of you to mention it, there is actually a very well-know fact that any computer with the default XP install would be infected in 15 minutes max (stat from a year ago). I guess
Ctb's example of uninfecetd comp was either the luckiest in the world, had no program on it or was behind a security wall
.
Quote:
Originally Posted by Ctb
And, I know there are some DNS purists who get all pissy about doing it (and they're wrong since the HOSTS file is the original "DNS"), but I really like to use those big hosts files full of known baddies on machines I don't directly maintain. That and Privoxy keeps people out of a lot of craptastic sites, and nobody is going to come and complain to you that they couldn't get into some Russian site they found in Google after they searched for... uh.. yea...
|
Thanks for your contributions
Ctb, but I'd advise you IMHO to change the level of technicality so as to ensure maximum impact. I would like the geek language and the nitty-gritty details out of this thread, as far as humanly possible. Privoxy seems like a very useful tool!
Quote:
I don't condone normal users having things like Spybot and Ad-Aware, or tools that supposedly keep registries clean. There are false positives in those sorts of things and their logs need to be scrutinized by someone who knows what they're doing to ensure that benign programs aren't damaged.
|
Generally true (it's about the question 5 and trusting applications), but I can mention at least one exception: CCleaner, very nice, reliable little tool, quite conservative in its cleaning policy.
Quote:
I would also recommend, however, turning off caching, saved passwords, saved form fields, etc. in your browser. I have Firefox set up at home so that, basically, every time I close the browser it wipes out all saved information - browsing history, address bar history, saved form fields, passwords, cookies - all gone. Having to always log in to everything all over again every time you close your browser isn't really as terribly annoying as you might think.
|
I wouldn't say this, you're on "very high privacy settings here" and most people will not go that far. People use single-sign-on cookies for convenience and even me whoe has no problem typing would be annoyed retyping things (or more exactly clicking the password from PasswordSafe) all the time (because I close Firefox often). Using CCleaner weekly seems like a more reasonable trade-off, unless your computer is full of sensitive data or essential to your job.
Quote:
People need to remember also that they're not defending state secrets on Pentagon computers here. You're going to keep out most, if not all, automated attacks just with Windows firewall and an up-to-date AV tool, and the manual attackers that are capable of breaking through your firewall and A/V probably aren't motivated enough by your collection of baby pictures to waste their time doing it.
|
You're stepping over the line of deciding policies for people. You have no idea what they've got on their computer. Credit card details are no secret data in the governmental sense, but they have exactly the same level of secrecy from the point of view of a normal user. We're talking about a community of online gamers here, and this community is under fire. Notice that already someone mentioned switching off AV/FW when playing? Look at this too:
http://eu.plaync.com/eu/about/pressr...sana_security/
As I said before, there's no "common sense" out of the blue, you need to make people understand what you mean by that. I know a lot of "geeks" (in a non-insulting sense, I consider myself one) have a lot ot share, but they usually can't be understood because of their lack of pedagogy and their obtuse language.
Re Firewalls, I agree with you that the normal user should stick with XP's one, unless he: a) has things to protect; b) has already been under attack. Then an outgoing firewall is advised (I used Kerio a long time ago, but it was too resource-consuming).
Quote:
Originally Posted by Malice Black
Hacking home PC's just doesn't happen. Most viruses/trojans gain access due to owner/user being a dumb ass.
|
Wrong (we're going here one step deeper into the underground). All professional hackers hack "normal users'" PC for the sake of creating a botnet, a network of PCs that they control and can use to launch Denial-of-Service attacks (asking all the PCs in their botnet to connect to the same website at the same time with the goal of either slowing/crashing the server, or preventing anyone else to connect to it). At the same time, they scan all sorts of documents (including word and pdf) for Credit card and bank accounts details. I even read about some corporate data being stolen and sold to competing companies.
Quote:
Originally Posted by -Sonata-
Another great secure browser is Avant browser that runs on the IE platform.
|
Good advice, as IE is still needed for a few sites, even for Firefox users. And I don't personally like mono-culture, even for Linux and Firefox.
Quote:
Picking up another security tip though, especially for gaming to keep on topic with the forum; While it may seem like common sense to many of us, the truth is this happens a lot more than realized. Don't share your accounts and the information with anyone. Treat your information as though it's your most prized posession. Don't share it with your best buddy, your Brothers, your sisters, your parents, your penpal in Siberia....Just keep it to yourself at all costs. No matter how complex your passwords are, if you blabber it to a "buddy" you might as well just make your passwords the same as your login.
|
Indeed, it's the "social engineering" aspect of security, that I wanted to address later (but now is as good a time as ever). One example of why this is bad is the case where a hacker contacts a member of your family pretending to be a close friend and revealing a few information they gathered on you (or not) to "force" them to reveal your password.
Quote:
Again, I know it sounds obvious, but it does happen more than some realize. It's pretty scary how "friends" just exchange passwords and logins for games.
|
I think that in GW that also happens: a) for people using RMT, when the bad guys find excuses to ask the naive gold-buyer to reveal his password; b) people selling in-game services (powerlevel ling); c) friends of a friend.