More Security

[newtr0n]

Im wondering if I should consider installing a firewall. What are the benefits and which one do you recommend?

Also, a friend recommend me to use PGP for emails. How does it work and must my contacts use it too to be efective? Will it be too complicate for an old woman like my mom to learn using it?

As fore files, im using Androsa file protector, do you recommend something else?

Thanks for the help.

 

[ken9122]

Win 7 has it's own Firewall with is fine for most users. That along with a free AV is what most of us use. I use COMODO free fire wall on 1 of my systems with no problems. i recommend MSE for your AV.
Ken

 

[Lemur]

The firewall that comes with Win 7 is fine. You can selectively block incoming traffic.

It's been a long time since I used PGP encryption (I'm talking Pegasus Mail), but here's a useful link:
PGP Desktop Email Encryption - Secure End-to-End Email Protection

 

[richc46]

A large percentage of members use Microsoft Security Essentials, Malwarebytes and the windows firewall. Excellent protection at no cost.

 

[dranfu]

Also, a friend recommend me to use PGP for emails. How does it work and must my contacts use it too to be effective? Will it be too complicate for an old woman like my mom to learn using it?

As fore files, im using Androsa file protector, do you recommend something else?

Thanks for the help.

PGP is not free, nor is it really considered "state of the art," as it used to be. And again, it is not free GnuPG, also known as GNU Privacy Guard, is free, and it is based on the same encryption protocol as Pretty Good Privacy, or PGP.

GPG-4-Windows is a windows implementation of GnuPG. It comes with a windows installer.

How does it work? You need to create a secure key and a public key. The software guides you through this. Your email recipients need your public key, so they can encrypt messages they send to you--you decrypt them with your private key (so only you can open them). When you send a message to someone, it is encrypted with your recipients public key--they decrypt it with their private key (so only they can open it).

What does a key look like?

 -----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.x.x.w/e-cvs (MingW32)


sljdsklajfdskhfdjkfhads897345un3498nb5y32498nbw98ynsijkrchwes
sjkfhdsn8937423498bn7249nb orhdsibn934754289yb49 yr5239bnr73y
sn bn89rw6yrn984n57y3298n75r298nb7532894bn4y298bncf4y2389bny6
nryw4893n75r389nv5u4389n5u34908nm85039n5vu3489n57v3498nv5734f
sljdsklajfdskhfdjkfhads897345un3498nb5y32498nbw98ynsijkrchwes
sjkfhdsn8937423498bn7249nb orhdsibn934754289yb49 yr5239bnr73y
sn bn89rw6yrn984n57y3298n75r298nb7532894bn4y298bncf4y2389bny6
nryw4893n75r389nv5u4389n5u34908nm85039n5vu3489n57v3498nv5734f
sljdsklajfdskhfdjkfhads897345un3498nb5y32498nbw98ynsijkrchwes
sjkfhdsn8937423498bn7249nb orhdsibn934754289yb49 yr5239bnr73y
sn bn89rw6yrn984n57y3298n75r298nb7532894bn4y298bncf4y2389bny6
nryw4893n75r389nv5u4389n5u34908nm85039n5vu3489n57v3498nv5734f
sljdsklajfdskhfdjkfhads897345un3498nb5y32498nbw98ynsijkrchwes
sjkfhdsn8937423498bn7249nb orhdsibn934754289yb49 yr5239bnr73y
sn bn89rw6yrn984n57y3298n75r298nb7532894bn4y298bncf4y2389bny6
nryw4893n75r389nv5u4389n5u34908nm85039n5vu3489n57v3498nv5734f
sljdsklajfdskhfdjkfhads897345un3498nb5y32498nbw98ynsijkrchwes
sjkfhdsn8937423498bn7249nb orhdsibn934754289yb49 yr5239bnr73y
sn bn89rw6yrn984n57y3298n75r298nb7532894bn4y298bncf4y2389bny6
nryw4893n75r389nv5u4389n5u34908nm85039n5vu3489n57v3498nv5734f
sljdsklajfdskhfdjkfhads897345un3498nb5y32498nbw98ynsijkrchwes
sjkfhdsn8937423498bn7249nb orhdsibn934754289yb49 yr5239bnr73y
sn bn89rw6yrn984n57y3298n75r298nb7532894bn4y298bncf4y2389bny6
nryw4893n75r389nv5u4389n5u34908nm85039n5vu3489n57v3498nv5734f

----------END PGP PUBLIC KEY BLOCK-----

Will it be difficult for your mom? No, not if you set it up for her, and walk her through the process. Basically, when you are sending messages to someone, you copy your message, click on your recipients public key to encrypt the message, and send it to them. Since only that person has their private key, then only they can open it.

Will they need some special software to use it? Yes, they will need something to manage their list of public keys (friends/family's public keys) and they will need some software to actually perform the decryption and encryption process. Just install GPG-4-Win on your mom's computer and it will be a cinch. Also note that GPG-4-Windows comes with an outlook addon, as well as software to manage the whole process. It's very easy.

I hope this helps clear up some things, and I'm glad to offer any clarifications. However, the website has good documentation too.

As for firewalls, I'm all about Outpost Firewall

P.S. If you want to practice, once you get it installed, message me and we'll trade public keys.

 

[DJROD]

I use to actually BUY Nortons 360. I know...some people hate Nortons and use to call it a resource hog. I has greatly improved. BUT...now Comcast users gets Free Nortons 360 forever as long as they have Comcast. So thats what i use. Works for me.

Have Malwarebytes also. Good software.

 

[dranfu]

As far as file protection, I would suggest True Crypt.

Free open-source disk encryption software for Windows 7/Vista/XP, Mac OS X, and Linux

Main Features:

• Creates a virtual encrypted disk within a file and mounts it as a real disk.
• Encrypts an entire partition or storage device such as USB flash drive or hard drive.
• Encrypts a partition or drive where Windows is installed (pre-boot authentication).
• Encryption is automatic, real-time (on-the-fly) and transparent.
• Parallelization and pipelining allow data to be read and written as fast as if the drive was not encrypted.
• Encryption can be hardware-accelerated on modern processors.
• Provides plausible deniability, in case an adversary forces you to reveal the password:
  
  Hidden volume (steganography) and hidden operating system. More information about the features of TrueCrypt may be found in the documentation.

 

[newtr0n]

thx all!

What about attached files wigh GnuPG?

And about true crypt, what if have dual boot (win and linux)

 

[dranfu]

You can encrypt attachments, too.

Yes, you can dual boot with true crypt. You have to set this up during the initial set up, and let it know you are dual booting (called multi-booting). It installs it's own boot loader. If you know how to set up Win and Linux, which you obviously do, then you shouldn't have any problems. Just read the documentation first.

 

[karlsnooks]

You need, and only need, MalwareBytes and Microsoft Security Essentials which will install, setup, etc Windows Firewall for you.

These are the ones I use.

 

[Nem]

Off topic, but i find these threads somewhat amusing, Why? because everyone always no matter what puts in what they use and what they i guess want YOU to use.

I'll just recommend the top security software people on this forum use.

Anti-Virus:

These two are the most recommended

• Microsoft Security Essentials (link)
• Avast Free Edition (link)
  
  - Others:
  
• Avira (link)
• AVG (link)
  
  - Paid:
  
• Norton (link)
• Kaspersky (link)
• ESET (link)

Firewalls:

• Windows Firewall
• Comodo Firewall (link) - Free
• Online Armor (link) - Free/Paid
• PC Tools Firewall (link) - Free
• Outpost Firewall (link) - Paid
  
  

Extra Security:

• MalwareBytes Anti-Malware (link) - Free/Paid
• SuperAntiSpyware (link) - Free/Paid
• Hitman Pro (link) - Paid
• Sandboxie (link) - Free/paid

There's more i probably missed but seeing many threads like this one. That's a list of recommended software i see.

 

[DarkEnergy]

thx all!

What about attached files wigh GnuPG?

And about true crypt, what if have dual boot (win and linux)

Google it, it's more complicated than standard full disk encryption. I posted instructions on mydigitallife how to do it some time ago. Truecrypt doesn't do anything other than prevent people logging on to your machine (if you're using full disk) or seeing your files if they attached your HDD to their PC. It doesn't make your files any safer while mounted. I use it anyway just for the sake of it not reducing performance at all, and you log in once with a password anyway (if you're a single user) so you might as well type your password at bootup and enable autologin- takes the same amount of time then