You are here:Home»KB»PC»Security»My PC Security Notes
Saturday, 21 February 2015 19:26

My PC Security Notes

Written by

This document assumes you have completely cleaned your PC following the information in my malware/service document or just have a clean PC, this document complements it.

I have also included security informations for other areas of security in this document to make it easier to get a more secure enviroment. If any sections over time get to big to be included here i will move them and refence the subsequent articls.

General

  • strong password (add generator links)
  • Rotate passwords?
  • 2 factor authentication
  • When asked how to best protect ourselves right now, Snowden said to “use full disk encryption to protect your computer and devices,” and to also use “network encryption” like SSL. He also suggested using the browser add-ons NoScript and Ghostery as well as using TOR. If you encrypt your hardware and your network, then you are “far, far more hardened than the average user,” he said.

Local PC

  • safe search toolbars etc.. (with the ticks etc avg safe search + link scanner)
  • antivirus software
  • firewall (best, ie comodo, zone alarm)
  • antimalware (should be part of av)
  • id protectino
  • password vault software ie keepass lastpass
  • latest software and patches
  • auto updates
  • Rapport
  • keylogger blocker etc..
  • additional online scanners
  • grc.com shields up
  • encyrpted drive (pros and cons)
  • java/flash/adobe reader upate to latest if need or uninstall completely. Also remove old java version.
  • Malwarebytes realtime scanner (possible in malwae section)
  • Pendrive autorun (not needed on win7 +)
  • Link scanners
  • Eula analyser
  • MRU-Blaster is a program made to do one large task - detect and clean MRU (most recently used) lists on your computer.
  • Zero filling + file shredding
  • run stuff in a sandbox (ie comodo kiosk / sandboxie (http://www.sandboxie.com/))
  • keyscrambler – this will scrambler keyboard output in the kernel
  • uninstall all unwanted programs
  • uninstall all unwanted services less security holes
  • USB Autoplay protection
  • use a virtual pc to web browse
  • antispam software in your client

Software to try

Browser / Browsing

Finance

  • add a note to paypal for them never to give out my credit card numbers ie the last 4 digit

Network Level

  • Public DNS servers
  • Opendns - dns monitoring
  • router
  • router firewall SPI etc.
  • router DDOS settings to on
  • dmz rule to dead ip
  • block uneeded ports (stealth/blocked/etc see grc.com)
  • TOR network
  • VPN tunnel
  • Google Public DNS is a free, global Domain Name System (DNS) resolution service, that you can use as an alternative to your current DNS provider. Google Public DNS
  • respond to ICMP ping set to off
  • disable upnp on router

Data Transport (on the internet)

  • PGP to internal encypt email messages
  • not all SSL smtp traffic is secure ie if the serv other end does not accept SSL (2 settings 'advantages' = if remote server supports ssl it will use that or default back to non ssl. required = remote server requires SSL smtp to accept email

Webserver

  • https always on
  • webserver https beast attack
  • web server section
  • penertration testing
  • testlabs.. SSL testing website
  • use secure php.ini in the sub root folder ie /home/lancast/ see example php.ini
  • redefine php.ini global location with htaccess (suphp and setenv)
  • turn php error displays off as this is a security thing
  • block Russia and china by IP

Research

Read 1438 times Last modified on Tuesday, 08 December 2015 14:15
Published in Security
back to top