Tips for safe computer usage?

Due to the sensitive nature of our computer usage, has anyone seen a best practice list for providers AND clients when using the computer browser / email system?

We are often limited on options to get help after an infection, and information leaks can be painful. So, it would be best to prevent infections.

If not, does anyone care to create one?

Good question. Supprized no one comment on this.

I always hear "have a firewall", "update your security software","stay away from free porn websites"

Due to the sensitive nature of our computer usage, has anyone seen a best practice list for providers AND clients when using the computer browser / email system?

We are often limited on options to get help after an infection, and information leaks can be painful. So, it would be best to prevent infections.

If not, does anyone care to create one? Originally Posted by thx

I run Linux with an encrypted Home directory (think of it like the My Documents for XP and USERS for Vista and Win 7) And you can use TOR which anonymizes your browsing and defaults to flush cache, history on exit

VPN, encrypted drive, portable apps.

These can be found for Windows if you're not ready for a switch to Linux.

If you don't know where a link goes to, don't click on it.

Don't click on any links from those spammy chain emails you get.

These are just general tips regardless of hobbying or not.

Specifically for hobbying, don't use your regular email as your hobby email - go to a free website like Yahoo mail or gmail and set up one dedicated for hobbying and use it only for hobbying.

Get several fake passports from a multiple countries.
Learn to speak at least four languages with a native accent.
Use computers only one time; after use, destroy them with high-intensity fire.
Grow a mustache.

Safety first.

In all seriousness, TOR/encrypted drive/VPN--all great ideas, but probably WAY above what the average user/hobbyist/provider needs here.

Just set up your browser to *ALWAYS* flush cache (and put the lid back down). Even better: Use a dedicated, different, portable browser (run from a usb drive) that is just for hobbying. Use a different email address that is ONLY FOR HOBBYING. Anything else you do in addition to those two steps might be great for general online security, but is probably overkill for posting here. Hobby smart!

Thank you for the posts.

Want to see your hobby life made public ?

While the latest anonymous hack on celebrities and attorney general may have been a hoax, or least revealed old information, what happens if a hacker focuses on the hobby? How about your ATF ?


* background

Malware can expose our contacts and emails, leak our account id and passwords, publish pictures, empty our bank accounts, broadcast our webcam, record our private conversations, and do anything your computer can do.
Simply, it can cause unwanted attention and problems for our private lives.

However due to the sensitive nature of information on our computers, we can not easily take the computer to a computer repair service when we suspect that our computer is infected. An Infection can be beyond the capability of a computer specialist.


SO... IT IS HEAVILY SUGGESTED THAT WE TAKE ADDITIONAL PRECAUTIONS WHEN WE SURF THE INTERNET AND HANDLE EMAILS IN ORDER TO REDUCE OUR CHANCES OF BECOMING INFECTED.


I have attempted to list suggestions for the computer NOVICE to reduce the chances of becoming infected by malware.

* Use a Tablet
In most cases, you need only a device to interact with websites and emails. IMHO, a full size tablet with a bluetooth keyboard is functional, portable and easy to isolate. Presently, there is not much malware written for these devices, and there are plenty of usefull applications for contact and time management.

Ok, if that is not an option, please continue to read:

* Use an Apple product instead of Microsoft.
Most malware is written for the Microsoft windows platform, so an Apple product would have less chance of getting infected.

* Use Google Chrome or Firefow browser.
It is possible to become infected without your knowledge, just by surfing to a website. The most common browser is Internet Explorer, and it is also the largest target for malware authors. It is suggested to use a Google Chrome or Firefox browser.

* Use a Web based email system.
While you may be hesitant to use a commercial email system, most do have better controls to protect you against malware and spam than smaller systems. Gmail, Hotmail, and Yahoo are good web based email systems. Their mail apps also work great on smartphones.

* THINK before you click on an email link or view the email attachment.
Be suspicous about any email wanting you to open attachments or click on links. Some of the most successful malware pretend to look like email from UPS/FedEx, IRS, banks, and other large companies.

* Keep your computer up to date
Microsoft and other companies routinely send out patches for security holes in their products.
If you are not routinely doing a "Windows Update" and updating Adobe Acrobat Reader, Sun Java and Adobe Flash applications then you are inviting old malware. (majority of malware can only exploit holes in older software)

* Do you need Java? Probably not, then remove it.
Java is seen on alot of computers but often not needed by any applications. If you do not need it, then uninstalling it will greatly reduce your exposure.
Caution: Instructions can be found at: http://www.java.com/en/download/uninstall.jsp
but, this suggestion may not be suited for novice users.

* Keep your antivirus software current.
Even if you are cautious and you keep your antivirus subscription paid, you can still become infected. If it is mild infection your antivirus software can usually remove the malware. Most antivirus products will also have features to make it harder for websites to track you by removing your browser cookies. ( http://en.wikipedia.org/wiki/HTTP_cookie )

* Use a different password for every website.
If you have a problem remembering passwords, then use a password vault app for your smartphone or computer. There are plenty of articles about password management/hints on the net.

* question/answers to do a password resets or alternative email address.
Many sites use a question/answer or alternative email address for password resets.
Use very hard to know questions/answers for password resets on phones. Many websites have an activity log so that you can check if anyone else is using your account.


This is meant as a summary/short article. We can go into details if someone asks.

Thanks THX; all very good suggestions....

I didn't know tablets were more "secure".............helpf ul.

Tablets are more secure than windows unless they run a Windows OS... Both Apple and Linux are based on a *NIX kernel so they are in a way related and more robust.

Linux distro's have gotten easier to install and books like Ubuntu for Dummies can walk you through the process of installing it.. once you see how easy it is to use, you begin to re-evaluate PC's .

In this hobby all one needs is portability (laptop) connectivity (wired, wireless and Bluetooth) Security, a browser and maybe some IM clients

Linux has all that

Browsers are:
KDE
FireFox
Chrome
Gnome

IM
Pidgeon

Email
Evolution (looks like OUtlook and works great with Gmail)

Security:
Your Home directory (where all your stuff is stored) can be encrypted at install
Meaning unlike Windows and even some Mac's I can remove the HD from it and slave it to another and still not be able to read content.

Get a cheap little laptop, get an solid state hard drive, go here and install this http://www.truecrypt.org/


Turn your rig off when you are done using it

Why the cheap laptop? You only need it for browsing I assume
Solid state hard drive? Its fast and it has a boot up time of about 15 seconds.
Why http://www.truecrypt.org/? It just works and the FBI cant crack it (Nope, not even our dear government can do it, ever.)

Cost about $300 - 400 bucks

Solid state hard drive? Its fast and it has a boot up time of about 15 seconds

So true Gotyour6 have a solid state drive on my desktop

If you have an iPhone the Onion browser, which uses the Tor network, as as anon as you can get. It's clunky sometimes, you have to re-enter your password too often, it's slower and you have to restart the browser if it times out, breaking the secure circuit. But it's 99 cents. So.

fuck this all sounds like greek to me, i only go to eccie on my home computer and never risk anything at work, even an email tied to eccie

Thanks THX; all very good suggestions....

I didn't know tablets were more "secure".............helpf ul. Originally Posted by Whirlaway

There is alot less malware written for non-windows devices, so there is alot less chance to be infected.

Similar logic for using a non-IE browser.