I Want a Secure System

[lamp]

I simply want

 

1. a secure system which is hard to hack

2. and I want to surf the web anonymously

 

I'm wondering can I achieve these goals with Windows 7, or would it be necessary to go over to Linux?

 

I researched this and found out that there's more to it than I thought and it it's quite harder to have a tight system than I thought it would be.

 

Are there any resources you'd recommend?

[Cap'n Refsmmat]

Simple rules to security:

 

1. Stay up-to-date. Use Windows Update regularly. Update your web browser whenever there's a new version. Make sure your plugins are up-to-date. Make sure Adobe Reader is up-to-date.
   
2. Keep regular backups.
   
3. Use an antivirus program like Microsoft Security Essentials and have it update itself regularly.
   
4. If you're browsing the Internet and visit a web page claiming you have tons of viruses and demanding you download some antivirus software, it's a scam. Don't do it. Don't install or run software unless you've checked its source and know it to be reputable.
   
5. Use good passwords and use different passwords for each service, or use a password manager like LastPass.
   
6. Don't give out the password to your email account, and make sure it's a good one -- if anyone gets it, they just have to press the "reset my password" button on any other website you use, and they'll get your new password emailed right to them.
   
7. If you're on a public wireless network (in a coffee shop or something), do not log into any sites if the login page is not secure (https). Someone on the network can easily intercept your password otherwise.
   

 

To surf the web anonymously, you need to use Tor. Unfortunately it makes browsing rather slow. Use it sparingly.

[xcthulhu]

I simply want

 

1. a secure system which is hard to hack

2. and I want to surf the web anonymously

 

I'm wondering can I achieve these goals with Windows 7, or would it be necessary to go over to Linux?

 

The easiest way is to install linux (which will make your computer much harder to hack), use Chrome in incognito mode all the time, block all cookies and javascript, and use open wireless networks in cafes whenever possible while avoiding entering any passwords.

 

~XCT

Edited July 15, 2011 by xcthulhu

[Cap'n Refsmmat]

If you do want to use open wireless networks, use Tor or a VPN service. VPN services route your traffic through another server, and all traffic between you and the server is encrypted. The VPN service provider could hypothetically track you (just as your Internet Service Provider could), but nobody in the Internet cafe could intercept your password.

[lamp]

A lot of people mention Tor, but there are other services too like hidemyass.com for example, which are faster than Tor. I'd probably use that.

 

 

I think I will probably not switch to Linux over I just don't like the whole Terminal procedure, I'll simply buy a book on Windows security and try to secure up Windows good enough. Since Windows is now much more secure than it used to be.

 

Thanks for the tips.

[pwagen]

I think I will probably not switch to Linux over I just don't like the whole Terminal procedure,

Most distributions of Linux have been graphics based for ages, and can be run without ever using the terminal.

 

Seeing as you can try it without installing, I'd suggest giving a LiveCD a go. Just remember it'll be way slower than installing it, but you'll get the basic feeling of it.

 

http://www.livecdlist.com/

[Realitycheck]

Ubuntu is one of the most popular and user-friendly distros and they offer a live cd. It's been years since I opened a terminal window. The biggest advantage I found is that you get absolutely no spyware garbage to mess with, no viruses, no hackers, but if you want Windows software, like games and any of the advantages of profit-driven software, it has its limitations. Openoffice misses lots of functionality from the real thing, however obscure the differences may be.

Edited July 16, 2011 by Realitycheck

[lamp]

You guys say it has been a long time since you used the terminal, what about installing and extracting packages, don't you need a terminal for that as well?

 

For what would you need the terminal in the first place?

Edited July 16, 2011 by chaseman

[Cap'n Refsmmat]

No, there are package managers to let you install and uninstall packages easily.

 

Generally you use the terminal if you need advanced configuration of adjustment of features, but Linux is getting better about making things accessible through the graphical interface.

[khaled]

Unix-based Systems are secure by default .. I suggest Ubuntu for a regular use, and Fedora (Red Hat) for server development use

 

In Ubuntu, you will find in the menu, Ubuntu Software Center .. which is where you can find an application you need, and if you choose one it will download & install automatically, sometimes you are asked for configurations, or authorization ...

 

Important tips for secure system:

- make a non-readable password, 8+ characters, mixed (at least 1 number, 1 lower-case, 1 upper-case)

- don't write down your password on a paper or on your system (this is worse)

- when making backup or sending a critical data online, or even through any medium, use encryption

- don't leave your computer open, and leave .. close your computer, and when you return open it

 

good luck,

[StringJunky]

The easiest way is to install linux (which will make your computer much harder to hack), use Chrome in incognito mode all the time, block all cookies and javascript, and use open wireless networks in cafes whenever possible while avoiding entering any passwords.

 

~XCT

 

It doesn't work that way...it just doesn't remember your history in that mode...it's also called "Porn Mode".

 

To protect your online transactions and passwords from snoopers and trojans use Rapport...it is the default protection with quite a few UK banks:

 

http://www.trusteer.com/product/trusteer-rapport

 

Make your everyday account have Standard User privileges not Admin...only use Admin account for actions that require it. This is the big difference between Linux and Windows...in Windows one has admin status by default and in Linux you have to enter a password everytime you make system changes...a virus needs admin priveleges to make changes and it can't do it from an open account with lower status...I think!

Edited July 25, 2011 by StringJunky

[khaled]

I agree with StringJunky, and add .. Chrome is not good for safe browsing, given it's developed by Google itself ...

 

I suggest using Firefox, under Linux ...

[StringJunky]

I agree with StringJunky, and add .. Chrome is not good for safe browsing, given it's developed by Google itself ...

 

I suggest using Firefox, under Linux ...

 

I'm an avid user of Chrome with MSE and Rapport as security and I've yet to get hit by a virus and I'm quite cavalier about clicking links. I am safe in the knowledge that I have whole-system images to fall back on if I get hit or it screws up...images are virtually a cure all. Macrium Reflect Free or Norton Ghost (not free) are good imagers and have good reliability records. I've yet to use a backup to recover from malware yet though. Adding a website checker like WOT is a good idea as well to warn you of dodgy sites beforehand.

[khaled]

I'm an avid user of Chrome with MSE and Rapport as security and I've yet to get hit by a virus and I'm quite cavalier about clicking links. I am safe in the knowledge that I have whole-system images to fall back on if I get hit or it screws up...images are virtually a cure all. Macrium Reflect Free or Norton Ghost (not free) are good imagers and have good reliability records. I've yet to use a backup to recover from malware yet though. Adding a website checker like WOT is a good idea as well to warn you of dodgy sites beforehand.

 

1. WOT is not a certification good enough for security, based its rating system can be manipulated by threats, unlike Certification Authorities such as enTrust, ..etc

 

2. a browser will no longer become safe, if you install an add-on/toolbar which is neither made by the browser dev team, nor certified by a formal authority

 

3. proxy application/services will make you anonymous to others, but not secured, because all of your data are migrated through a specific server,

thus if you put critical data on that connection, you are exposed to danger ...

 

-- you know that hackers can steal data from your system, without even reading it ...