-
Hey, guest user. Hope you're enjoying NeoGAF! Have you considered registering for an account? Come join us and add your take to the daily discourse.
Online Security |OT| Staying Safe on The Web
- Thread starter Enco
- Start date
- Status
Don't sign in through http://www.twitter.com, always make sure you enter password only AFTER the URL has a https in front of it. It boggles my mind that they even allow users to enter user name/password into http URL.
What does GAF think about EMET?
EMET can stop commonly used exploit techniques because it adds another layer of protection, like added stack and memory protection.
My general usage guide is to download the latest version from Microsoft (3.5 tech preview atm).
Add all applications that use internet connection. Add browsers, java, flash player and pdf readers minimum.
Change the settings for all added applications, check all boxes to begin with, then uncheck those that cause an issue.
EMET can stop commonly used exploit techniques because it adds another layer of protection, like added stack and memory protection.
My general usage guide is to download the latest version from Microsoft (3.5 tech preview atm).
Add all applications that use internet connection. Add browsers, java, flash player and pdf readers minimum.
Change the settings for all added applications, check all boxes to begin with, then uncheck those that cause an issue.
Demigod Mac
Member
I'd suggest to the OP: include something about disabling the Java web browser plugin. Hardly anything outside a corporate intranet uses Java, and leaving the Java plugin active and open at all times is a huge security risk.
If you need Java for a certain website you frequent, I'd suggest enabling it, but disable it specifically in your main web browser, and use your "Java browser" (probably IE) to go to that particular site that needs it.
That way if you stumble across a drive-by-download exploit website, you won't get hit.
Also, keeping Adobe Flash up to date is very important.
If you need Java for a certain website you frequent, I'd suggest enabling it, but disable it specifically in your main web browser, and use your "Java browser" (probably IE) to go to that particular site that needs it.
That way if you stumble across a drive-by-download exploit website, you won't get hit.
Also, keeping Adobe Flash up to date is very important.
velociraptor
Junior Member
Great thread. Posting so others are aware in the wake of Cryptolocker.
Hari Seldon
Member
Seems like a good thread to ask, what is a good recommendation for VPN clients? I want one for watching NHL gamecenter not blacked out, and for general purpose security.
Im_Special
Member
No Microsoft Security Essentials is not a good choice anymore, well if you want something that will never ever bother you, never ever detect false positives then sure its good for that but protection is very poor, in fact its literally the only AV now that keeps failing today's AV tests. If the OP is recommending this then I don't know what to say.
Also no mention of Adblocker Plus? FFS, that coupled with NoScript will block 98% of all viruses from even getting on your computer in the first place. Nearly all threats come in via browser or java exploits. Prevention is 100 times better then Reaction.
Oh, and inb4 a huge derail about Adblocker + Neogaf, because whitelisting doesn't exist right?
Also no mention of Adblocker Plus? FFS, that coupled with NoScript will block 98% of all viruses from even getting on your computer in the first place. Nearly all threats come in via browser or java exploits. Prevention is 100 times better then Reaction.
Oh, and inb4 a huge derail about Adblocker + Neogaf, because whitelisting doesn't exist right?
Well the thread started 2.5 years ago. I figure a lot has changed since then.
Im_Special
Member
Oops I didn't even realize this was a necroed thread, I just saw MSE followed by MSE praise, which should be the opposite reaction nowadays.
This thread needs an update!
In general, the best way to stay safe is to have as little of your information exposed as necessary. Avoid creating many online accounts if you can and delete all your long dormant online accounts if you are no longer using them. For the ones you are using, make sure to be aware of the information you've already given.
My personal stance on privacy is it should be a two-way street. I don't mind giving some information to use a service if I know how that information is going to be used, by whom and I have the option to remove my information should I choose to stop using the service. What I don't like is the presumption of entitlement certain companies have to take and hold onto your information indefinitely while making it easily accessible to anyone yet at the same time making it very difficult to remove your information from their website or database. Uninvited solicitation is something that truly annoys me so I don't have a cavalier attitudes towards privacy.
How to remove yourself from ALL background check websites,
http://www.reddit.com/r/technology/comments/j1mit/how_to_remove_yourself_from_all_background_check/
How to easily delete your accounts and check on how to delete an account before you sign up for a website or service,
http://www.accountkiller.com/en/
How stop prescreened credit and insurance offers,
http://www.consumer.ftc.gov/articles/0148-prescreened-credit-and-insurance-offers
How to get a free credit report,
http://www.fdic.gov/consumers/consumer/ccc/reporting.html
National Do Not Call Registry,
https://www.donotcall.gov/
Safe Browsing Tool WOT (Web of Trust)
https://www.mywot.com/
(I can't personally vouch for this privacy service, but I've heard good things... https://www.safeshepherd.com/)
General rules for staying safe,
- Golden Rule for the internet: Nothing is really free! If you are ever uncertain of how a website or service is making money, chances are they are harvesting your personal information either to serve you more advertisements or to sell to a third party marketer.
- Always be weary of where your give out your personal information, what information they are asking from you and for what purpose. This also applies offline.
- Even if you are giving your information to someone you trust, if they write it down somewhere, make sure they keep it secure or shred that paper when they are done with it.
- Avoid going to shady websites. Generally, piracy and pornography websites are the worst offenders because they are giving you something for "free" but this can also apply to following random links and shortened or scrambled URLs. Chances are you don't really need the thing you are trying to download anyway so think twice before you download anything. Other shady websites are those offering to sell you something at "too good to be true" prices. If you can't find it on reputable website at a decent price be very wary.
- Avoid downloading and creating accounts with apps unnecessarily. Also, deleting an app doesn't mean your account is deleted! You usually have to contact them or log in on their website to delete your account. It's usually easier to delete your account and reclaim your information if you don't log in with your Facebook/Twitter/Google account so just keep that in mind when creating an account.
- Avoid installing unnecessary plugins, extensions and software.
While some of this applies to everyone, this post is mainly from a US perspective where privacy can be hit-or-miss depending on who you are dealing with and how much you personally care about it. Would be great if others from other countries could chime in with their perspective respective to their countries privacy laws.
Also, I don't know what the situation is with Anti-Virus software and password managers these days. MSE seems to have fallen out of favor immensely since Windows 8 came out. Hopefully someone with better knowledge about it can update the OP.
PS. Should be obvious at this point, but make sure the firewall on your computer is turned on.
In general, the best way to stay safe is to have as little of your information exposed as necessary. Avoid creating many online accounts if you can and delete all your long dormant online accounts if you are no longer using them. For the ones you are using, make sure to be aware of the information you've already given.
My personal stance on privacy is it should be a two-way street. I don't mind giving some information to use a service if I know how that information is going to be used, by whom and I have the option to remove my information should I choose to stop using the service. What I don't like is the presumption of entitlement certain companies have to take and hold onto your information indefinitely while making it easily accessible to anyone yet at the same time making it very difficult to remove your information from their website or database. Uninvited solicitation is something that truly annoys me so I don't have a cavalier attitudes towards privacy.
How to remove yourself from ALL background check websites,
http://www.reddit.com/r/technology/comments/j1mit/how_to_remove_yourself_from_all_background_check/
How to easily delete your accounts and check on how to delete an account before you sign up for a website or service,
http://www.accountkiller.com/en/
How stop prescreened credit and insurance offers,
http://www.consumer.ftc.gov/articles/0148-prescreened-credit-and-insurance-offers
How to get a free credit report,
http://www.fdic.gov/consumers/consumer/ccc/reporting.html
National Do Not Call Registry,
https://www.donotcall.gov/
Safe Browsing Tool WOT (Web of Trust)
https://www.mywot.com/
(I can't personally vouch for this privacy service, but I've heard good things... https://www.safeshepherd.com/)
General rules for staying safe,
- Golden Rule for the internet: Nothing is really free! If you are ever uncertain of how a website or service is making money, chances are they are harvesting your personal information either to serve you more advertisements or to sell to a third party marketer.
- Always be weary of where your give out your personal information, what information they are asking from you and for what purpose. This also applies offline.
- Even if you are giving your information to someone you trust, if they write it down somewhere, make sure they keep it secure or shred that paper when they are done with it.
- Avoid going to shady websites. Generally, piracy and pornography websites are the worst offenders because they are giving you something for "free" but this can also apply to following random links and shortened or scrambled URLs. Chances are you don't really need the thing you are trying to download anyway so think twice before you download anything. Other shady websites are those offering to sell you something at "too good to be true" prices. If you can't find it on reputable website at a decent price be very wary.
- Avoid downloading and creating accounts with apps unnecessarily. Also, deleting an app doesn't mean your account is deleted! You usually have to contact them or log in on their website to delete your account. It's usually easier to delete your account and reclaim your information if you don't log in with your Facebook/Twitter/Google account so just keep that in mind when creating an account.
- Avoid installing unnecessary plugins, extensions and software.
While some of this applies to everyone, this post is mainly from a US perspective where privacy can be hit-or-miss depending on who you are dealing with and how much you personally care about it. Would be great if others from other countries could chime in with their perspective respective to their countries privacy laws.
Also, I don't know what the situation is with Anti-Virus software and password managers these days. MSE seems to have fallen out of favor immensely since Windows 8 came out. Hopefully someone with better knowledge about it can update the OP.
PS. Should be obvious at this point, but make sure the firewall on your computer is turned on.
Last time I had gotten a nasty virus on my PC, I read somewhere that deleting Java is a good way to prevent Viruses since a lot of them use Java as a gateway into your PC. I never use Java for anything, so I deleted it and have not gotten a virus since then.
I also use Bitdefender Free, Malwarebytes, AdBlock (GAF is whitelisted, I promise
), and Ghostery, but I had gotten viruses with this programs before in the past.
Can anyone shine some light on whether or not deleting Java makes any difference?
I also use Bitdefender Free, Malwarebytes, AdBlock (GAF is whitelisted, I promise
), and Ghostery, but I had gotten viruses with this programs before in the past.Can anyone shine some light on whether or not deleting Java makes any difference?
- Status