up vote 3 down vote favorite
share [g+] share [fb]

Which are the tips you know will increase the security on the computer? For instance, the first one for me is disable the autorun.

link|improve this question
2  
Insert obligatory "install Linux" response here. – Simon P Stevens Jul 16 '09 at 13:49
3  
Disconnect the network? – Greg Jul 16 '09 at 16:26
As far as I know "classic" autorun is disabled since Windows XP SP2. It gives you a windows where you can decide what to do. – KovBal Jul 16 '09 at 16:57
@Greg, and turn off the computer? – FerranB Jul 16 '09 at 17:28
@FerranB, Yep. Better go find a tin-hat whilst you're at it. But don't go outside, that's dangerous. You should order it online. But... oh. damn. – Greg Jul 29 '09 at 13:48
feedback

13 Answers

up vote 9 down vote
  • Disable what you don't use
  • Work at the lowest privilege level possible

(more)

link|improve this answer
4  
RUN. AS. NORMAL. USER. – Will Jul 16 '09 at 13:50
1  
And do NOT disable UAC. – grawity Jul 16 '09 at 16:00
feedback
up vote 7 down vote

I'm far more concerned about my own behavior, than I am about what is running on my machine. Most compromised machines are compromised because they're handled by users who exhibit (unknowingly) careless habits.

My mother (everybody's best user-example) is a clear case. Any attachments in emails, they're presumed to be safe. "Look at these funny pictures - pics.exe" is presumed to be a photo-montage of happy children.

The best defense against exploits, malware, virus' is a good offense. Be a cautious user, and trust nobody. Practice a healthy balance between sanity and paranoia.

link|improve this answer
1  
This is a great answer. My PC is always totally virus/spamware free. Everyone else I know regularly trashes their PC and brings it to me for a wipe/reinstall. I don't have any special software installed or anything like that, and I set their PC up just like I would set mine up when I give it back to them. It's their bad browsing habits that cause the problems. – Simon P Stevens Jul 16 '09 at 13:55
3  
No, this really isn't a great answer. Even if you don't surf porn, even if you don't open the funny pictures, your computer is vulnerable if it is connected to the net and protected at all (say, not behind a router even). At one time, this may have been fine advice, but it just isn't any longer. (I'm not downvoting because it's not harmful advice - and you don't need to think about what you do, but that alone is not enough.) – Telemachus Jul 16 '09 at 14:01
Also, saying "my PC is always clean" is evidence for nothing. First, it's one anecdotal example. Second, if you had a keylogger on your computer, you wouldn't know that it wasn't clean. – Telemachus Jul 16 '09 at 14:02
Telemachus, and how do you plan on installing a key-logger if the user is behind a firewall, browsing safe sites, not downloading attachments, etc? – Jonathan Sampson Jul 16 '09 at 14:11
1  
@Jonathan: Look at Simon's comment. He goes out of his way to say "I don't have any special software installed or anything like that." That indicated to me no firewall. I made the comment because some people believe that good browsing habits alone are enough. They simply are not. – Telemachus Jul 16 '09 at 14:29
show 3 more comments
feedback
up vote 6 down vote
  • Install a good firewall
  • Install a good antivirus
  • Install all latest OS updates
  • If you use Firefox install the NoScript add-on and allow JavaScript only for sites that you trust
  • If you use Firefox install the Web of Trust add-on, this provides help to avoid well know malicious sites
  • Do not download or install software that your are not sure is 100% trustful/safe
link|improve this answer
2  
+1 for NoScript. Essential add-on. – jtimberman Jul 18 '09 at 22:22
feedback
up vote 2 down vote

Never ever execute something that is taken from:

  • dc++ or other peer-to-peer file sharing
  • network shares
  • friend's cd's
  • never ever download cracks - find a free tool if you can't afford to buy software
  • only download software from the main site
  • always scan downloaded software that you don't are familiar with

Don't let friends that you don't know use your computer for a long time.

link|improve this answer
What is "dc++" ? – Peter Mortensen Jul 16 '09 at 18:33
@Peter: peer-to-peer filing sharing: en.wikipedia.org/wiki/DC%2B%2B – Telemachus Jul 16 '09 at 19:06
+1 for advice about not downloading cracked software. As if people who steal software are going to be scrupulous enough to not infect it with something! – jtimberman Jul 18 '09 at 22:23
feedback
up vote 2 down vote

+1 to all the other guys who said: run as non admin, get a good firewall, get a good virus scanner, don't follow links or open attachments in untrusted emails, etc.

My extra tips:

  • Don't download rubbish. (Especially illegal rubbish) and avoid things like LimeWire.
  • Use a whitelist based script blocker like NoScript.
  • Use OpenDNS. It's got a built in anti-bad-site-filter. And it's also faster than my ISP's DNS anyway.
link|improve this answer
feedback
up vote 2 down vote
  • Use a firewall
  • Use a good anti-virus program that is updated regularly
  • Don't run everything under the administrator account
link|improve this answer
Also, there is no replacement for safe browsing habits. I think we can all agree on that. – T Pops Jul 16 '09 at 15:45
feedback
up vote 2 down vote

Interestingly, the NSA provides a number of security configuration guides for a variety of versions of Windows, Mac OS X, Linux, and Solaris. The guides include a comprehensive listing of security-related configuration settings, recommended changes and other best practices.

link|improve this answer
feedback
up vote 1 down vote

Sometimes I try out different software (games, utility software, etc.) on my system to see how they work, or before I recommend them to friends. There's a program called Sandboxie which allows you to install software in a separate folder on your PC (which it refers to as the "sandbox") and play with it without making any changes on your PC's registry, settings, etc.

link|improve this answer
Please note that Sandboxie does not work on 64 bit versions of Windows. – Peter Mortensen Jul 16 '09 at 18:32
feedback
up vote 1 down vote

Are you on a laptop? TrueCrypt is an absolute must. I went from "I have to protect my laptop at all costs" to "Someone took it? I'll download my backup from the server and call insurance." I still follow basic safety, but I won't put my life on the line to protect it anymore because I know my data is safe.

link|improve this answer
feedback
up vote 1 down vote

Make sure any Wi-Fi device is secure. Enable passwords on startup/login or at least for the adminstrator accounts.

Don't leave it lying about where anyone can use it.

link|improve this answer
1  
Password for all acounts! Even if it's a simple one. – Mercer Traieste Jul 16 '09 at 16:16
feedback
up vote 1 down vote
  • Lock your computer when you are way from it
  • Keep your OS and software (especially web browser, PDF reader, Flash, etc.) up to date with the latest patches
  • Keep your computer behind a NAT router or other firewall
link|improve this answer
feedback
up vote 1 down vote

Download and run Malwarebytes' Anti-Malware every so often. It's fantastic for getting rid of those nasty, hard-to-kill trojans and spyware application that you picked up while you -- as Jonathan said -- exhibited careless habits while surfing.

Oh, and change the default password on your router!

Hope this helps!

--Dubs

link|improve this answer
feedback
up vote 0 down vote

I recommend these two pages from consumerreports.org to friends and family for basic tips. These are written for average users (i.e. not superuser.com users) but are comprehensive enough for the big baddies of today's online environment.

7 online blunders - item 6 on this is the big one I've seen lately: "Clicking on a pop-up ad that says your PC is insecure"

Best ways to stay safe online

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.