The internet can be a hostile place, and crackers are quick to jump on
any software vulnerability. Fresh installations are always several
patches out of date and it is important to always keep your software
updated to the latest version.
For Windows:
Make sure Windows Autoupdate is enabled or visit the Windows Update
website. Install all patches, including service pack 2. (run
%SystemRoot%\system32\wupdmgr.exe or visit
http://windowsupdate.microsoft.com/)
Enable the Windows Firewall or run a third-party firewall. Running
behind a router can also add a good deal of security.
Upgrade your web-browser to the most recent version
(http://windowsupdate.microsoft.com/ for Internet Explorer, or
www.firefox.com for Firefox)
Upgrade your Java runtime to the most recent version
(http://www.java.com/en/download/manual.jsp)
Make sure your Flash player is up to date by visiting
http://get.adobe.com/flashplayer/
If you are using any other third-party plugins for your browser,
you'll want to make sure those are patched for any security issues as
well. Secunia has a free scanner which will point out any known
vulnerabilities on installed software
http://secunia.com/vulnerability_scanning/personal/
Beyond that, you should be fairly secure so long as you keep your
software up to date, don't open any unknown files with executable
content, and -preferably- aren't running with administrator rights.
Can I skip this - I don't go to sites needing Java.
> <snip other advice>
>
> Beyond that, you should be fairly secure so long as you keep your
> software up to date, don't open any unknown files with executable
> content, and -preferably- aren't running with administrator rights.
Alright.
>Spalls Hurgenson wrote:
>> <snip other advice>
>>
>> Upgrade your Java runtime to the most recent version
>> (http://www.java.com/en/download/manual.jsp)
>
>Can I skip this - I don't go to sites needing Java.
You can, of course, but I don't see the point. Java gets used on a lot
of sites and you may not always be aware that it is being used. It's
only a 15MB update (very small compared to what you are going to have
to download to get XP patched up) and your system probably already has
an older version of Java installed. So why not update especially
since the goal is, as your topic suggests, "security".
Or you can download No-script, which blocks Java and a few other things as
well.
--
Steve Hayes from Tshwane, South Africa
Web: http://hayesfam.bravehost.com/stevesig.htm
Blog: http://methodius.blogspot.com
E-mail - see web page, or parse: shayes at dunelm full stop org full stop uk
>On Fri, 18 Sep 2009 07:03:04 -0400, Spalls Hurgenson <yoi...@ebalu.com> wrote:
>
>>On Fri, 18 Sep 2009 00:12:12 -0700 (PDT), Albert
>><albert.xt...@gmail.com> wrote:
>>
>>>Spalls Hurgenson wrote:
>>>> <snip other advice>
>>>>
>>>> Upgrade your Java runtime to the most recent version
>>>> (http://www.java.com/en/download/manual.jsp)
>>>
>>>Can I skip this - I don't go to sites needing Java.
>>
>>You can, of course, but I don't see the point. Java gets used on a lot
>>of sites and you may not always be aware that it is being used. It's
>>only a 15MB update (very small compared to what you are going to have
>>to download to get XP patched up) and your system probably already has
>>an older version of Java installed. So why not update especially
>>since the goal is, as your topic suggests, "security".
>
>Or you can download No-script, which blocks Java and a few other things as
>well.
That doesn't work with Firefox and -because IE is so embedded in the
operating system- is not 100% foolproof in any event.
NoScript does work with Firefox. Perhaps you meant it doesn't work
with IE?
D'oh. Yes, of course. NoScript is, of course, a Firefox add-on. It has
no functionality in IE. Thank you for catching that.
What I was trying to say (let's see if I get it right this time) is
that depending on NoScript to protect you from Java malware is not a
foolproof solution. Even if you only browse the web with Firefox, IE
is embedded in the OS and other apps may be using Internet Explorer's
functionality without your being aware of it (for instance, I believe
Steam (used by many computer games) uses IE in some parts). Thus, it
is a good idea to secure Internet Explorer even if you have no
intention of using it, just to be safe.