Staying on top of personal computer security

[connda]

For those who wish to stay on top of personal computer security, including all Internet attached devices, I recommend subscribing to the following:

The United States Emergency Computer Readiness Team
https://www.us-cert.gov/ncas

The SANS Internet Storm Center
https://isc.sans.edu/dashboard.html

Forewarned is forearmed, imho.

[Chicog]

Sound advice.

They come out with useful tips like these, the most recent:

https://www.us-cert.gov/ncas/tips/ST15-002

https://www.us-cert.gov/ncas/tips/ST15-003

Edited December 16, 2015 by Chicog

[Srikcir]

Although a router generally is not attacked by malware, it is still vulernable.

Research router vulernabilities such as http://vpnpick.com/threat-router-malware-protect/

For example:

If you haven't changed the default password, the default administration password for your router, the malware on your computer can reach out to your router and reconfigure it.

Most routers have some type of setting that determines whether or not it can be configured remotely. The default setting is usually set to “0.0.0.0,” which indicates that all IP addresses are valid for remote configuration. This is extremely insecure, so you would want to change this setting to 1 specific IP address or your local subnet address.

You should always change the default SSID (wireless network name) of your wireless router. The problem is that some router manufacturers choose to include the router model’s description in the default SSID. This information could be used by an attacker to see if your particular model has any security vulnerabilities.

[maderaroja]

Thank you, people.

[Chicog]

Although a router generally is not attacked by malware, it is still vulernable.

Research router vulernabilities such as http://vpnpick.com/threat-router-malware-protect/

For example:

If you haven't changed the default password, the default administration password for your router, the malware on your computer can reach out to your router and reconfigure it.

Most routers have some type of setting that determines whether or not it can be configured remotely. The default setting is usually set to “0.0.0.0,” which indicates that all IP addresses are valid for remote configuration. This is extremely insecure, so you would want to change this setting to 1 specific IP address or your local subnet address.

You would want to turn the bloody thing off!

[hawker9000]

Although a router generally is not attacked by malware, it is still vulernable.

Research router vulernabilities such as http://vpnpick.com/threat-router-malware-protect/

For example:

If you haven't changed the default password, the default administration password for your router, the malware on your computer can reach out to your router and reconfigure it.

Most routers have some type of setting that determines whether or not it can be configured remotely. The default setting is usually set to 0.0.0.0, which indicates that all IP addresses are valid for remote configuration. This is extremely insecure, so you would want to change this setting to 1 specific IP address or your local subnet address.

You would want to turn the bloody thing off!

Some routers have an online button that can be used to just take the router offline (i.e., disconnect from the internet) without powering it down. If not too disruptive in terms of getting back online each time - some ISPs seem to handle this frequent going on & offline better than others though there's really no good excuse for that being the case - this is a good way to limit your exposure somewhat.

But PC security is certainly not simply a matter of securing your router. That's just one piece of the puzzle.

[cyberfarang]

Computer security is about common sense. Doing regular scans, not downloading unknown attachments, not clicking on suspicious links and keeping passwords secure. That`s all there is to it.

[Chicog]

Although a router generally is not attacked by malware, it is still vulernable.

Research router vulernabilities such as http://vpnpick.com/threat-router-malware-protect/

For example:

If you haven't changed the default password, the default administration password for your router, the malware on your computer can reach out to your router and reconfigure it.

Most routers have some type of setting that determines whether or not it can be configured remotely. The default setting is usually set to 0.0.0.0, which indicates that all IP addresses are valid for remote configuration. This is extremely insecure, so you would want to change this setting to 1 specific IP address or your local subnet address.

You would want to turn the bloody thing off!

Some routers have an online button that can be used to just take the router offline (i.e., disconnect from the internet) without powering it down. If not too disruptive in terms of getting back online each time - some ISPs seem to handle this frequent going on & offline better than others though there's really no good excuse for that being the case - this is a good way to limit your exposure somewhat.

But PC security is certainly not simply a matter of securing your router. That's just one piece of the puzzle.

No, I mean turn off remote management.

[hawker9000]

Computer security is about common sense. Doing regular scans, not downloading unknown attachments, not clicking on suspicious links and keeping passwords secure. That`s all there is to it.

No, not true. 'Definitely NOT "all there is to it". Not in 2015 anyway. An otherwise legitimate financial or shopping website, for example, can be compromised and infect those wbo access it whose machines are unprotected by up-to-date and effective security software with realtime monitoring capability. Professionals all know that computer security is multi-layered and user training and discipline is just one layer. Unknowlegeable feelgood chestnuts such as the above are not helpful. Reminders that user discipline is one vital component of computer security are.

[JohnnyJazz]

If you're interested to know what is going in and out of your computer, I recommend glasswire. The interface is attractive and easy to read. The free version is limited but it's a first step to better understand and control your network activity.

https://www.glasswire.com/