Personal Computer Security and Privacy Questions

[Thomas]

So I just installed the NoScript and Flashblock extensions for Firefox. I believe NoScript should greatly help protect me against malicious scripts should I accidentally come across any or if some ad has been compromised.

I haven't had any problems in over 3 years, but I would rather be safe than sorry. My computer proficiency is very high, but I'm sure not as high as those who work with computers for a living, so please don't hold back any ideas because they're too complicated for the average person.

To do: HOSTS file

QUESTION 1: Other than upgrading to Windows 7 and staying current with all updates, what other precautions can I take to protect my computer?

QUESTION 2: I like the idea of NoScript blocking tracking scripts. What other things can I do to protect my privacy?
Installed "Ghostery" Fifefox Add-On

QUESTION 3: I like the idea of Flashblock stopping most ads. It's extremely annoying when the audio in some ad starts playing and I can't find it, or it doesn't even have a mute button (curse the person who made that decision). What other things can I do to protect my sanity?

QUESTION 4: Any ideas on the best place to get a copy of a good HOSTS file?
See: http://winhelp2002.mvps.org/hosts.htm

My Setup:
Windows XP Pro SP3
Windows SteadyState - Now Deep Freeze
Microsoft Security Essentials
Firefox
- NoScript
- Flashblock
- Ghostery

Most importantly, I use Common Sense 2010 Professional Version:
(I'm not a brain-dead idiot that clicks on stupid links/games/offers/deals/etc)


EDITED: Fixed Hotlinking Image, made other updates in red

[Ameer]

Love the pic.

If you use firefox you can set it so it's always private browsing.

[C247]

Don't know if it would be feasible for you but I recently installed Ubuntu linux on an old machine and love the feeling of security I get from it. Just an option. Can be installed into an unformatted partition on your windows hdd and dual boot. I'm still learning a new OS but it's surprisingly easy to get the basics down.

[Thomas]

Eventually I'll get into Linux. When my heart feels like it, I do some research/learning about it. I'm think I'm going to try Fedora first, Ubuntu second. I probably won't be comfortable until XP is significantly outdated (2 or 3 years, Microsoft's support ends April 8, 2014).

[MasterOfNone]

A couple things I recommend:

Create a standard user account for your daily use instead of using your administrator account. That way, even if you slip, only minimal damage can be done.
In Firefox, disable 1st party and 3rd party cookies and just allow session cookies. Add exceptions for sites you trust.

A clean hosts file:

# Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost

[sugar land dave]

Download and install a quality free antivirus program such as Alvira or AVG. Avast is also ok. Second layer, you can then download another free program such as Lavasoft Ad-aware. If you want yet a third layer of protection you can download and install the free Threatfire.

[Thomas]

I've heard the "use a regular user and not administrator account" one before. It makes sense, maybe I'll do it, I don't know. Thank you for reminding me about it though.

Great idea on the cookies. I've never heard of that before though, so after a little searching, I found http://support.mozilla.org/en-US/kb/Dis ... %20cookies (for the benefit of others).

As for the hosts file, I don't need a clean one, I need a "good" one, meaning that other people have already compiled a list of ad/tracking/malicious/etc sites to block. Something like: http://winhelp2002.mvps.org/hosts.txt
I'm looking for recommendations. That website says "Proudly now the #1 rated HOSTS file on the Internet!" and "Now regularly featured on the Kim Komando Radio Show" ... I used to get her e-mails about 5 years ago, it was never worthwhile for me.

[Thomas]

Download and install a quality free antivirus program such as Alvira or AVG. Avast is also ok. Second layer, you can then download another free program such as Lavasoft Ad-aware. If you want yet a third layer of protection you can download and install the free Threatfire.

Hmm... I just did some quick Googling. It seems like MSE has fallen significantly in comparison. It used to be rated among the best.

[FishInTx]

Well with todays malware and endocryn bytes it would be best for both of our computers intranet if you'd just go ahead and send me your sceenname and password, in PM ofcourse! Shouldn't take more that just a couple days to figure it out. I got the Noblock trafficking noscript blocking script block block. Picked it up a Best buy for 99.95. and installed with waves. When you pm me only type in piglatin it drives forieners nuts and the spyware can figure it out. Thanks, Gerry Mandering. just kidding Sorry Way past my bedtime

[pcgizzmo]

Download Microsoft Virtual PC or VMWare Player. With these you can create a Virtual PC on your current machine. This is just a virtual computer that can run Windows in full screen or a window on a physical PC. Make a copy of the virtual machine before you start it. Use this virtual PC to surf, read email, download email attachments, install programs etc... do most anything BUT things like check your bank account, make online purchases etc.. Only do those on your regular PC. If you get a virus, malware etc.. on your virtual machine simply delete it and make a copy from your original virtual machine and start it and your back in business.

This is also know and a sandbox or sandboxing. By using the virtual machine you are isolating your physical PC to some degree.

[pcgizzmo]

Download Microsoft Virtual PC . With this you can create a Virtual PC on your current machine. This is just a virtual computer that can run Windows in full screen or a window on a physical PC. Make a copy of the virtual machine before you start it. Use this virtual PC to surf, read email, download email attachments, install programs etc... do most anything BUT things like check your bank account, make online purchases etc.. Only do those on your regular PC. If you get a virus, malware etc.. on your virtual machine simply delete it and make a copy from your original virtual machine and start it and your back in business.

This is also know and a sandbox or sandboxing. By using the virtual machine you are isolating your physical PC to some degree.

[Thomas]

Well with todays malware and endocryn bytes it would be best for both of our computers intranet if you'd just go ahead and send me your sceenname and password, in PM ofcourse! Shouldn't take more that just a couple days to figure it out. I got the Noblock trafficking noscript blocking script block block. Picked it up a Best buy for 99.95. and installed with waves. When you pm me only type in piglatin it drives forieners nuts and the spyware can figure it out. Thanks, Gerry Mandering. just kidding Sorry Way past my bedtime

See picture in original post
a little though : "noscript blocking script block block"

[Thomas]

Download Microsoft Virtual PC . With this you can create a Virtual PC on your current machine. This is just a virtual computer that can run Windows in full screen or a window on a physical PC. Make a copy of the virtual machine before you start it. Use this virtual PC to surf, read email, download email attachments, install programs etc... do most anything BUT things like check your bank account, make online purchases etc.. Only do those on your regular PC. If you get a virus, malware etc.. on your virtual machine simply delete it and make a copy from your original virtual machine and start it and your back in business.

This is also know and a sandbox or sandboxing. By using the virtual machine you are isolating your physical PC to some degree.

Hmm... Can I do Windows XP Mode inside Windows Virtual PC? Because then I can just recreate my current configuration in that. My desktop should be able to support Win 7, but I would have to upgrade the ram on my laptop (it's a new, 7 year old laptop). My desktop is only 6 years old though

[katmandu]

If you're using Firefox, I highly recommend the Ghostery add-on:

https://addons.mozilla.org/en-US/firefo ... /ghostery/" onclick="window.open(this.href);return false;

It blocks LOTS of tracking.

Also, I suggest Better Privacy:

https://addons.mozilla.org/en-US/firefo ... src=search" onclick="window.open(this.href);return false;

It blocks "Flash" or "super cookies".

[Thomas]

If you're using Firefox, I highly recommend the Ghostery add-on:

https://addons.mozilla.org/en-US/firefo ... /ghostery/" onclick="window.open(this.href);return false;

It blocks LOTS of tracking.

Also, I suggest Better Privacy:

https://addons.mozilla.org/en-US/firefo ... src=search" onclick="window.open(this.href);return false;

It blocks "Flash" or "super cookies".

Thank you!