Ramblings of an old Doc

 

I saw an article on the PC Magazine website which might be of use to a wide range of users. They detail how to secure your PC’s at home and when using public venues.

These guidelines were published by the NSA’s Central Security Service.

They are very good, and are the same recommendations being implemented throughout the government.

Worth a look, I’d say. It covers Microsoft, Apple, Linux and Sun’s OS’s – pretty much the full range.

Sources and Links:

1. http://www.pcmag.com/article2/0,2817,2385688,00.asp?kc=PCRSS03129TX1K0000625&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+ziffdavis%2FPCMagazineTips+%28PCMag.com+Tips+and+Solutions%29&utm_content=My+MSN

2. http://www.nsa.gov/ia/guidance/security_configuration_guides/operating_systems.shtml#microsoft


Comments (Page 3)
3 Pages1 2 3 
on May 24, 2011

DrJBHL
All this post was for was to help folks secure their computers.

 

And we do appreciate it.  Thanks.

on May 24, 2011

Elana, XP recommendations are the only thing here as to settings and an addendum. There's nothing that could write code on your system. As for your second question regarding Office 2010, I didn't see any recommendations because only operating systems were discussed. I would recommend you keep it updated and when SP1 comes (and it will), download and install it.

 

on May 25, 2011

Thanks doc for cutting through it all.... "SP1"  

Now a question for PC uses who have recently migrated' to Win 7.  As far a s security goes, do you feel safer than you did running XP?

on May 25, 2011

Welcome, Elana. When you consider an upgrade to 7, you have some homework to do. There is help, though:

http://windows.microsoft.com/en-US/windows7/help/upgrading-from-windows-xp-to-windows-7

The Microsoft Upgrade Advisor: To find out if your machine can handle Windows 7:

http://windows.microsoft.com/en-US/windows/downloads/upgrade-advisor

I'd download and run the adviser first, then go to the first link above and go through all the steps... to prevent pain.

 

on May 25, 2011

Microsoft Windows 7

As part of a change in our development strategy for security guidance, NSA does not intend to publish a separate guide for Windows 7 beyond what was produced as a cooperative effort between the vendor and the security community. The Special Security – Limited Functionality (SSLF) settings in Microsoft’s Windows 7 Security Guide track closely with the security level historically represented in the NSA guidelines. It is our belief that this guide establishes the latest best practices for securing the product and recommend that traditional customers of our security recommendations use the Microsoft Security Compliance Management Toolkit when securing Windows 7.

 

Est ce que cela change quelque chose?

Reste t'on dans le même circuit?

Avons nous références d'autres utilisateurs sur le comportement?

___

 

What is what it changes something?

Stay you we in the same circuit?

Let us have we references of the other users on the behavior?

 

on May 25, 2011

lecajef, try looking to see if there's an explanation in French before doing anything with your system.

on May 25, 2011

ElanaAhova
Thanks doc for cutting through it all.... "SP1"  

Now a question for PC uses who have recently migrated' to Win 7.  As far a s security goes, do you feel safer than you did running XP?

I moved from VISTA to 7 (and do feel safer on that computer).  But not really.  I am still in the process of cleaning a computer that got a Java Trojan.  Even MS gave up on it and told me to reload.

As we see from another of the Doc's articles, malware knows no bounds when it comes to OS - and AV SW cannot protect you from your own actions.

on May 28, 2011

Dr Guy:  oh, I hate trojans, too...  not familiar with the 'java' variety.  I hope you can save all the data, etc., on your PC.  My recovery from the malware required me to reformat my HD, and relaod Win Xp, (about 6 months ago), because of the 'facebook trojan.'  I'm sure yours was a hassle, as well.  Forgive my lack of knowledge, what does "AV SW" refer to? 

Yes, I did learn the lesson that my own actions re: the facebook virus was made so easy because I was not careful.  Were it not for a few very dedicated and very helpful folks on these forums, I would have been lost on how to proceed.

off thread?  I have been reading about ways to partition one's HD, and keep data, programs, etc., in one partition, and keep the boot part, and the web browsing parts in separate partitions.  The idea is, i think, that the malware cannot jump partitions?  Is this an effective strategy to 'contain' malware damage?

on May 28, 2011

Elana, this explains what they are and a bit about them:

http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Trojan%3AJava%2FKoladeiter.A

Dr Guy
malware knows no bounds when it comes to OS - and AV SW cannot protect you from your own actions.

True.

Elana, this reference from 2009 suggests that it won't protect:

http://www.wilderssecurity.com/archive/index.php/t-260989.html

Bitbox is a new Firefox virtualized browser which should give protection, but the installation, etc. is in German so there are plenty of ways to go wrong in installation. I don't recommend finding it and doing it unless your knowledge of German is very good. In coming versions of Firefox it may become available. One way to protect is by doing all browsing through a 'virtual machine'. Carguy1 does this all the time. I'm not sure how that applies to his email/instant messaging (other routes of infection).

on May 31, 2011

DrJBHL
Elana, this reference from 2009 suggests that it won't protect:

Doc is right - Any malware can jump a partition.  Back in the days of DOS, separate partitions were necessary, but no longer.  And they really do not give you anything.  A second HD helps with performance but the bugs can still (and will if that is what they are after) infect them.

But the one thing a second drive is really good for is data - especially if you have to reload the OS on an OEM that only comes with a "wipe and install" option.  The extra hard drive (with all the data) will not be affected.

3 Pages1 2 3