24 Apr 2011

Secure Computing Habits

Geek University, malware, Secure Computing Habits 2 Comments

 

Software to Fix Problems IconThere are so many nasties out there on the Internet, how are you ever to manage? Are they all out to get you?

The answer is yes and no. Preventing problems begins with your behavior.

There are different classes of computer users. There are the average people who use the Internet to check their email, log into Facebook, surf the Internet from their portal of choice (Yahoo, MSN, AOL, etc.), and browse the occasional Youtube video. There are the power users who engage in the aforementioned activities and are also likely to manage their own space and identity on the web through their own website and social media outlets. These users are likely to listen and watch podcasts, use online applications, lust after the latest gadgets, and follow the latest trends in the industry. The other class of user that I focus on are what I would deem the college-aged and teen-aged group of users. This class of user is difficult to classify, as many users have enough knowledge to get into trouble, but not enough to get out. This group of users is extremely well-versed in social networking, online services such as Pandora, IM platforms, and is an avid consumer of online media (whether that is through Youtube, Hulu, or illegally).

This article focuses on these three types of users. Changing your behavior will do more to keep your PC running in top form more than any piece of software on the market. It should also significantly reduce your stress levels. I won’t lecture you, but will simply list some of the things you need to do to maintain the security of your computer. Top off your coffee, and let’s dig in, shall we?

Turn On Automatic Updates

This is very important to do. Why? Because you will forget to update your machine. You have more important things to remember, don’t you?
Windows XP
Go to Start –> Control Panel –> Windows Update –> Change Settings (left column) –> and select Install updates automatically –> OK.
Windows 7
Go to Start –> Control Panel –> System and Security –> under Windows Update, you will see Turn automatic updating on or off, click that –> under Important updates, select Install updates automatically (recommended) –> OK.

Install Antivirus Software

Rule number one: Don’t get lured into the subscription model. While it is likely that your computer came with Norton Antivirus (now, a decent antivirus), or McAfee (NOT a decent antivirus), you DO NOT want to pay $40-$60 per year do you? You could send it my way! …I’m kidding… Give it to the Humane Society instead. You are going to want one of the extremely capable free antivirus programs available. I am serious when I say that three of the free programs are better than any of the ones you can buy.

There are a few that I recommend. The first one is the one that I use on all of my machines. It is Microsoft Security Essentials 2, and it is terrific. It scores very well in tests, is very easy to use, and it won’t nag you to purchase a paid version like some of the other free alternatives (like AVG). I am sure many of you are familiar with AVG’s free offering, and I must tell you that it is no longer worthy of consideration. I used to use it on my machines several years ago, but it is no longer a worthwhile alternative. It doesn’t perform very well, and it nags you much more than an antivirus program should. Once you set up your scanning schedule, you should never hear from your antivirus unless you have a problem.

The next antivirus I would recommend is from Malwarebytes. This is an extremely capable program. Let me put it this way: if you had an issue and brought it into a shop to get fixed, this is probably the antivirus that they would use to scan your system. The free version is very good at rooting out some of the worst nasties out there. Highly recommended.

The other antivirus worth considering is SuperAntiSpyware. This is one of the best programs out there. It detects and removes malware as good as any program out there, and like my other two recommendations, it is very light on system resources. This is the antivirus software that I use when I go to someones house to deal with a virus (the portable version is the one I use for this).

Contain Spyware

Sadly, the threat of viruses, trojans, and rootkits are only part of the equation in Internet security. Spyware is even more widespread than viral malware, and it is important that you protect yourself. Luckily, if you followed my advice (and you should), the three antivirus programs I mentioned above do a very good job of managing spyware as well. Unlike antivirus software where you only want to have one program installed on your machine at a time, it is not a bad idea to have a second spyware program on your computer as a backup. My recommendation is to use one of the three programs above, and if you are paranoid, or if you have teenagers, then go ahead and download Spybot Search & Destroy as a backup solution.

Get Behind a Firewall

Turn on Windows Firewall. Now.
Go to Start –> Control Panel –> Windows Firewall –> Turn Windows Firewall on or off (left hand column).
Windows 7
Go to Start –> Control Panel –> System and Security –> Windows Firewall –> Turn Windows Firewall on or off (left hand column).

If your computer is hooked up to a router, then all the better. In Windows Vista and Windows 7, the firewall is very good. If you still use Windows XP, then you should consider using a terrific, full-featured firewall from Comodo.

Update Your Browser

If you are using Internet Explorer 6 (or earlier), then it is your TOP PRIORITY IN LIFE to upgrade your browser. There are three browsers that I use all the time, Internet Explorer 9 (my current favorite), Opera 11, and Firefox 4. If you have tried one of the earlier versions of any of these programs and didn’t like them, then I strongly suggest you revisit them. The latest versions of these programs are radically different than their previous incarnations, and they are blazingly fast. Another alternative that many people use (that I don’t like personally) is Chrome. It is worth checking out as well. If you are using Safari, just stop. While Apple has positioned themselves as a more secure platform, the reality is that their software is among the worst and least secure out there. They don’t get attacked as much because no one uses them, relatively speaking. You should be aware that no browser is safe however.

Now that we have touched on the software that you should have on your computer, we can talk about the most important part of the secure computing equation: YOU!

While computer attacks have gotten more sophisticated (drive-by downloads for example), many vulnerabilities are still delivered in the old tried and true method: email.
How can you protect yourself?

Don’t Open Attachments!

While many a geek has been spreading the word on this for years, this is still a widespread problem. Why? It is likely that people see an attachment from someone that they know, so they figure it is safe. Guess what? That is exactly what the malware writers want you to think! The malware that they write goes through your contact list and sends itself to everyone in your contacts! That is why this is so effective. Grandma wouldn’t send you malware, would she? It turns out, she would…cause you never call or visit! Just kidding…but she may being sending you malware (though likely not intentionally). Keep this in mind: attachments from those you know are not necessarily safe. If you open email on the web, through one of the web emails (Hotmail, Gmail, Yahoo, etc.), then they are set to automatically scan attachments before they open. If you use a work email, an email from your ISP, or a private email, then you don’t have such protections. It is better to be safe than sorry!

Don’t Get Hooked by Phishing!

Since you have already updated your browser (you did…right?), this is much easier. All of those browsers have built-in anti-phishing features. In Internet Explorer for example, the address bar turns red and it warns you. You aren’t out of the water yet, however. Phishers will try new bait — in the form of hyperlinks. They typically send an email from a financial site such as PayPal, eBay, a bank, etc. (although it could be anything with a log in) asking you to update your information. Should you follow the link in the email? NO!!! If you think that this is legitimate, you should open up a new tab and manually type in the websites address in the address bar. Under no circumstances do you want to click a link in an email that is asking you to update your information.

Download Responsibly!

Do you get media from Limewire? STOP! Is it legal? No (even if you buy the Pro version). Is it safe? Definitely not! It is incredibly easy to write virus code and piggyback it to an mp3 or movie file. The size of the virus is so small, that you can not tell the difference. The goal is to attach it to the current most popular songs and movies, and watch the virus spread like the plague.
Do you dread paying iTunes $1 per song? I don’t blame you! I hate iTunes! How are you supposed to get music then? There are lots of alternatives nowadays. My recommendation is that you use a subscription service such as Zune. You pay $15 per month for unlimited access to music (being able to download and keep $10 worth every month). There is a lot to be said for performing a search for Aerosmith and being able to click a button and suddenly you have every album they have put out. You can also stream the music through the web, without commercials! If you don’t like the idea of a subscription service, then you should use Amazon MP3. If you don’t like paying for stuff, then you should check out one of the streaming services such as Pandora, Last.fm, or Rdio.

If you follow the tips mentioned above, then you will find that you are able to start worrying about the more important things in life again.

Don’t forget to hug your nearest Geek!