How to Keep Your Computer Safe!

in #security7 years ago (edited)


This is just a general guide on how to keep your computer secure. It is centralized around MACs, but can be used for other Items.

Password Security

This is a fundamental part of computer security. Without a secure password, your computer is open for the taking. Below is a password guide I recommend you follow. (Please note that if you don't have any sensitive information going on that computer that this may not be as important)

  • Change your password every 3-6 months
  • Use Different passwords for different things (make sure you remember them)
  • Don't write it on a sticky note or text document
  • Use a minimum of 12 characters
     * Phrases Help (Example Crypt0.W4ll3t.1s.53xy
  • Don't give out to people you don't trust

Backups

Updates

Basically, make sure your computer, antivirus, and anything else is up-to-date and set to update when needed

Always use Antivirus

  • Windows Defender I hear some people say "It's good", but in my view that won't cut it. Hackers plan on you to have it and right code around it.
     *I recommend if you don't have any to either purchase webroot or use (avast, bit defender, super anti spyware, ext... that are free)
     * Be warned the paid software have more features, but don't necessarily mean they are better

Use a VM

If you do get a virus, one handy tool is to work within a VM. A VM is basically a virtual computer within your computer. If you do get a virus, all you have to do is delete the VM and re-create the VM and won't have to worry about infection.

  • VMware and virtual box are good free software
    *If you use Linux or MAC, you have less chance of getting a virus

What to do if you think you got a virus

The safest solution would be to re-image the computer (re-installing the operating system). If you don't want to do that here are some good tools you can use. I recommend when you use these to boot into safe mode (google if you don't know what that is)

  • Super AntiSypware
  • TDS Killer
  • RR Killer (Run first, it kills the virus but doesn't get rid of it)
  • Combo Fix (Very Thorough, but can damage computer)
  • Malwarebytes
  • Avast
  • Bit Defender
  • Complete Internet Repair
  • ADW Cleaner (Good for adware, but can get glitchy)

If you liked this post feel free to "Resteem" this post and follow me at "https://steemit.com/@cryptowallet"

Sort:  

I have been thinking about using VM to access my bank account or steemit or even other online wallet. I assume if I only serve the website I trust on the VM, it is less risky to have my password stolen , right ?

If you are trying to deal with money (thousands of dollars), this would be a fairly safe (yet long route). Feel free to change anything, but this is just a general route:
1 Create VM (Linux Distriubtion would be the best)
2.Setup VPN Tunnel (Externally assuming you are bridging network adapters/cards)
3.Install AV & AD Blockers
4.Update Everything
5.Create a snapshot (I'd say once a week update the snapshot with any new OS/AV updates, or before use if you are paranoid)
6.When connected to VPN, load website (if you have a 3rd party wallet like my etherwallet, they have offline wallets you can download that are more secure)
7.When done, close VM

  1. Whenever you use the VM, load the snapshot of when it was last updated
    *Be aware nothing is full proof as there are zero-day bugs and exploits
    **Also Diversify your assets (Money/Crypto) so if you do get hacked it won't destroy you

thanks ! nice suggestion

Good question.

I added a reply, see full post

Very helpful! I've been weary of turning on my laptop because I have a very strong feeling someone remotely accessed it and have been doing stuff to it. When it became obvious I turned it off and, disconnected any wires and haven't turned it on since.

If someone really wanted to be secure he should stay away generally from products from M$, Intel, AMD and so on.

The people now winning because of WannaCry and the SMB exploit it uses but they should wait till something find its way into wild which exploits Intel's Management Engine which isn't patchable like the some software exploit.

The best solution is something more 'open' source like a rpi/opi or similar with debian/linux but in the end someone will only be secure with a notepad and otp encryption.

Malware is on the increase for Macs, I did a review of my computer and online security and it wasn't so good so I took a lot of steps to improve it. Encrypting DNS traffic was one thing I did which I hadn't come across in the past. I'm looking into a good VPN at the minute. Updated all my passwords (that was a pain)

Also, creating a small encrypted drive/or folder on your computer where all your sensitive data is stored is a good idea. No passwords should be kept on your computer without an encryption protection.

The general consensus these days is actually that if you're using Windows, you should stick with Windows Defender as third party antivirus programs use some weird tricks to hook in to the OS's system calls which actually introduce a bunch of different attack vectors.

This Twitter thread between some AV guy and Google's head of desktop security is pretty enlightening:
https://twitter.com/justinschuh/status/802491391121260544

Essentially the AV industry grew out of Microsoft not taking the whole issue very seriously, which is no longer the case and they respond incredibly quickly to responsible disclosure of vulnerabilities (for context here, Tavis Ormandy is from Google Project Zero and is like the grim reaper of 0-days): https://twitter.com/taviso/status/861751140437839872

tl;dr: be careful - a lot of AV is badly written and can cause more harm than good

taviso Tavis Ormandy tweeted @ 09 May 2017 - 01:14 UTC

Still blown away at how quickly @msftsecurity responded to protect users, can't give enough kudos. Amazing.

justinschuh Justin Schuh 😈 tweeted @ 26 Nov 2016 - 12:37 UTC

@VessOnSecurity @codelancer @taviso You misunderstand your own ignorance. AV is my single biggest impediment to shipping a secure browser.

Disclaimer: I am just a bot trying to be helpful.

Wow this bot is actually really handy!

This post has been ranked within the top 25 most undervalued posts in the first half of May 26. We estimate that this post is undervalued by $21.63 as compared to a scenario in which every voter had an equal say.

See the full rankings and details in The Daily Tribune: May 26 - Part I. You can also read about some of our methodology, data analysis and technical details in our initial post.

If you are the author and would prefer not to receive these comments, simply reply "Stop" to this comment.

Coin Marketplace

STEEM 0.20
TRX 0.13
JST 0.029
BTC 61394.39
ETH 3386.99
USDT 1.00
SBD 2.50