General system security

Post Pages

Author: hyrican

The content of this post does not reflect the opinion of the editors.


This workshop offers information and tips that should make it easier for newbies in particular to configure their computer securely, to get some background information and to surf the Internet "safely" without constantly catching malware.
The large number of further links offer extensive further information.


1. Browser

By default, Internet Explorer is a poorly and insecure browser that can easily be crashed by incorrectly programmed pages.
ActiveX is the source of many evils such as dialers installing themselves in the background or Trojans / worms / browser jokes.
It should therefore be deactivated in the browser or at least prompted to do so. Alternative browsers such as Opera or Mozilla (both with an integrated mail client) or Firebird (without a mail client) are better, more secure and with additional features such as PopUpBlocker.

Opera: opera-fansite.de
Mozilla: mozilla.kairo.at
Firefox: firefox.bric.de


Here is a browser check: heise.de

The next thing to mention is JavaScript.
It's generally pretty safe, but it reveals a lot of information about yourself.
See here: http://www.gurusheaven.de/index_sicherheit.html "target = blank> gurusheaven.de
Unfortunately, many pages do not work properly without JavaScript.
When it comes to Java, I also prefer the Sun version and not Microsoft's.


2. Email

Outlook is not a particularly good mail client because, due to its widespread use, many worms and viruses are written especially for it. It is also set insecure by default and security gaps are discovered again and again, which are often only partially fixed.
The safer and better alternative are also here other mail clients such as

Email: geve.de
TheBat: thebatworld.de
PegasusMail: www.bzs.tu-graz.ac.at
Thunderbird: thunderbird.bric.de


or simply the integrated mail clients from Opera or Mozilla.
These also have additional features such as filter lists and junk lists that can be used to delete spam emails directly on the server.
Here you can find a security test for e-mail programs


3. Firewall

Up and down the country there is the opinion that you could make your computer safe with a firewall.
That's not true.
A hardware firewall can secure a computer, provided it is configured correctly and whoever configures it understands how it works.
A desktop firewall definitely does not make the computer secure because it runs with the same rights as all other applications including Trojans, viruses and worms. This means that it can be levered out, tunneled, bypassed or simply switched off. I am not going into more detail about the technology of firewalls, that would go beyond the scope of this, I prefer to write informative links.

Summary, one can say "There is no one button security."

With the help of a desktop firewall you can learn which programs connect to the Internet and if you work with your firewall you can learn a lot about network protocols. Without knowing how a firewall works and how it is configured correctly, it is useless, annoying and dangerous because it suggests security without being able to keep this promise. Furthermore, it can itself contain security gaps, which means that the gap an attacker needs on a possibly securely configured computer is only created.

Here are the links:

iks-jena.de
stud.tu-ilmenau.de
pflock.de
ntsvcfg.de



It is safer than a firewall to configure the services that offer Internet functionalities under Windows, such as file and printer sharing or UPnP.

A guide for WinXP there here .
For Win2000 here

As well as the use of meaningful programs such as Active Ports (supernature-forum.de) that shows all connections and the associated applications that are set up on the Internet.
Here you will find port scanners to test whether services are offered on the web:
portscan.de
scan.sygate.com


4. Spyware

Many programs that can be found on the Internet bring program components with them that spy on you and send the collected information to the web.
Windows' own programs such as the MediaPlayer or the WinXP operating system also record user data and send it to the web.
To prevent this "espionage", there are various tools that detect and delete the spyware. Sometimes the program doesn't work anymore, but I think there are enough clean freeware alternatives on the web so that you can do without spyware-infested programs.
A good alternative to WindowsMediaPlayer is, for example, Winamp.
Here are some links to antispyware programs:
XP AntiSpy
AdAware
Spybot Search & Destroy
HiJackThis