Security issues, Java, Java script etc

[VK4DD]

Hi Gents,

To keep your computer free from virus and worms is a challenge these days.

But here are 10 Tips:

1. Always ensure you have the lastest updates for your machine (Use windows Update)
2. Install a virus scanner (a good free one is Avast - www.avast.com )
3. If you have JAVA installed (Go Control Panel -> Add or remove programs), uninstall it unless you absolutely need it. Java posses a security risk and slows down your computer. Generally, you don't need Java for the majority for 99% of websites and programs (this includes VKlogger.com)
4. Install Firefox ( www.mozilla.org/firefox ), if you have not already done so
5. Turn off Remote Desktop connections (if you google this, I'm sure you'll find many instructions & tutorials)
6. Use backup software (if you don't have this, you should think about buying some) to make regular backups (once a month is recommended) of your data. The backups should be stored on a external hard drive. Although this is not directly linked to security, it is always a good idea to have backups, so you can restore to an earlier date, should a virus find itself on your computer. The inbuilt System Restore in Windows XP is not recommended for this, as viruses can easily infect the backups.

If you want to add another layer of protection to your computer, you should also consider:
7. Install a firewall, if you have not already done so. The inbuilt firewall in XP is not sufficient, as it doesn't provide much protection. (Zonealarm Free Version is a good one)
8. The "NoScript" addon for firefox allows you to selectively enable Javascript, Flash and other active content (like Java) on a page. Javascript (and other active content) has many security vulnerabilities, and are the means that allow hackers to exploit security problems in Windows. If you can selectively enable active content from only the websites you trust (google, vklogger, etc), you remove this passageway for hackers. See: https://addons.mozilla.org/en-US/firefox/addon/722
9. Visual Basic and Visual C++ (etc.) also pose a security risk. Although this is much of a lesser risk, you should try and remove it, as long as programs on your computer don't need it.
Often, there will be an update for visual basic on the Microsoft site but generally it is not updated by windows automatically.
10. If you are really serious about security, you should have a look at "Secunia PSI". This program will scan all the programs on your computer, and will tell you if there is an update available, and how much of a threat it posses.

73 Ron.

[VK4DD]

Hi Gents,

Here are some tips for securing your windows XP.

Microsoft has launched a free anti virus program called Microsoft Security Essentials.
You can download this here.
http://www.microsoft.com/Security_Essentials/

The second tip is to use turn DEP off.
DEP is a Data execution prevention and this provides extra security to your windows XP.
http://support.microsoft.com/kb/875352

The third tip is to turn off auto run off in general.
http://support.microsoft.com/kb/875352

The last tip for this posting is to turn Java off in PDF files.
There is absolutely no need to have Java script enabled in your PDF files.
Go trough the settings and turn Java script off in your PDF program.
Foxit a free PDF reader has this feature, adobe probably as well.

(Very important to have https://addons.mozilla.org/en-US/firefox/addon/722 installed to prevent scripfiles patching your machine).

A 64bit Windows XP is also more secure than the 32 Bit.
Basically because the 64 Bit has an updated and more secure Kernel with security features.
This stops programs patching the windows Kernel. IE root kits.
Root kits hide malicious software so that they can't be detected or seen by anti virus software.
These root kits bury them selves into your windows and need to be avoided at all cost.

That's all for this security update.

73's Ron
VK4DD

[VK4CP]

Topic moved to Computers - Hardware/Software forum.

[VK5AJL]

I have yet another solution. My main computer isn't connected to the internet nor to any net. I am typing on a piece of junk with no details of any kind on it so I don't care much what sort of virus, worm or horse gets on it. There's nothing much anyone can hack. If I do get a gremlin of some kind, I format the disk and reinstall the entire thing. It is a pain in the neck to do so I do use firewalls and virus checkers.

Backing up is done by plugging in a seperate boot disk (the joy of disk cages, external usb drives and flash sticks) and copying files onto two seperate external terabyte disks normally kept in the cupboard. Software is very limited but I only use this old piece of junk for the internet. It can still accept keys quicker than I can type them and is fast enough to play movies from the net.

The stuff on my main computer is simply too valuable to me to risk letting someone else breath on it. Next time you are thinking of updating, do so by all means, but the old piece of junk might come in handy.

[VK4DD]

Hi John VK5AJL,

There is nothing wrong with your approach. Keep the good computer with all the data isolated from the internet.
I have been thinking about this approach as well, but the only things what stops me is the extra electricity it uses.
Yet an other carbon emitter.....

There is still the risk that your Isolated computer still gets infected when you move programs on to the "safe PC" from the "Internet PC".
You still need updates for virus scanners and I assume you install also new software from time to time.
This can infect your safe PC.

Some times it feels as if the PC's and credit cards are systems invented for Hackers....
That is why I stopped using a credit card. internet Fraud, ID theft, your details can be stolen from an other PC.
We all pay for the huge losses credit card companies and account holders make.
Retailers pay a huge fee to credit card companies. ... Off course these cost priced in the items you purchase.
The only reason why we still have this ancient system is because consumers are willing to take these risks and to pay higher prices.
In countries were the credit card is less common you get charged an extra fee for using a credit card.
Here in VK this is already in the price included (except some stores).
But when you negotiate a better price for say a TV... you will get a better price if you don't pay with a credit card

Gents be aware that your computer is wide open for the outside world unless you start doing something about it.
I don't think you can get it 100% secure but you a fire wall and a virus scanner is not enough these days.....

73 Ron
VK4DD

[VK4DD]

Hi Gents,

This time I would like to ramp up the security one step more. It is about using a Spyware scanner.
I must admit I used to think lightly about the need of these things. But that is over....
I used to think that spy ware was innocent and used to track your internet behaviour....something with cookies etc but it is now much more serious.
Your ID and passwords can be stolen and the door can be opened for worms and other malicious software to get into your system.
If you want to know more about it than ... I suggest to read all about it in the Wikipedia.

http://en.wikipedia.org/wiki/Spyware

But if you want a more secure system than lets do something about it.
This program is free and it found a few issues in my computer .

But try it out. When you install it go for the manual installation and untick all these extra toolbars and other rubbish you don't want on your PC.
This program has also got a real time shield warning you for bad internet pages

http://www.spywareterminator.com

Don't worry its free, even after it has found bad things on your PC. It won't ask you to pay for it.
I have been running it now for 2 weeks and I am happy with it.

73 Ron
VK4DD

[VK5AJL]

The computer I keep away from the internet doesn't need virus scanners and I never transfer software from the net to it. It is rare I ever need to install new software. I write most of my own for it anyway. The only things I transfer are files like JPGs or other files I know are not executable. Most of the software on the internet machine is internet related anyway like new activeX controls etc. These aren't needed if the machine is not on the net. My main machine has the standard stuff like a word processor, graphics editor, movie player etc. I construct various internet pages (direct html or scripts with a text editor) on it then transfer that to the internet machine with a stick and not vice versa.

As to the power, my internet machine uses a max of 65w for the computer and I think around 30 for the LCD monitor. It goes on standby after 5 mintues and uses a lot less on average. The main machine uses a bit of juice but gets powered down if I am not using it during the next hour or so. I can transfer stuff with memory sticks a couple of smaller harddisks (80Gb) I can plug into either. Provided I don't run things from the transfer disk there is no problem.

I get horses and creepy crawlies all the time on the internet machine but AVAST has managed to clean them all up so far except for once when I had to reformat.