Ten Tips for Keeping Windows Fast and Secure (Part 3 of 3)

If you missed the first two parts, please go read them now.

8. Use an active virus scanner and spyware blocker.
    There isn't much of an explanation for needed this. In the windows world this is required. On Ubuntu, virus scanners and spyware scanners are not needed due to other measures in place to help prevent infections. However, for Windows, ensure the definitions are updated daily and don't let your scanners expire. You need to stay up to date.

9. Don't click links in emails even if you know the source.
    This is true for any OS, but even more so with Windows. In every OS, links in emails can trick you to reveal your passwords and other private data to bad guys. In windows, they can also infect your computer easily. Also watch out for attachments. If you get a file from someone you know, it can still be bad. If it's a video, or a picture ask them to put it on a popular site like youtube, flikr, or facebook. Then go view it there. All it takes is a new virus which infects that type of file to get in their system, then it will be in your system. Using a known third party doesn't eliminate the risk completely, but it reduces the risk.

10. Don't be an administrator.
    Many of us share a computer with family. It can be a pain in the butt, but to help keep the bad guys out of the computer give each family member their own account. Make sure your family member is not also an administrator. In fact, it's better if you create a separate account for yourself too which isn't an administrator. When you need to install a new application, switch to the administrator account and run the install. Some applications won't play nicely with this and expect administrator privileges. Really if they can't get these security requirements right, do you expect them to get it right in other ways?

If you enjoy this blog, please click the follow button!

Ten Tips for Keeping Windows Fast and Secure (Part 2 of 3)

5. Don't install free or cheap applications unless it's open source.
    There are some exceptions to this too such as AVG Virus Scanner. However most free or cheap closed source applications want something in return for that low price. Perhaps they give you spyware, or they will start harassing you to buy a license. Even if this is not the case the coder can unintentionally create a vulnerability or fail to patch a vulnerability. Adobe Acrobat Reader is a free application supported by a major software company and even that has introduced vulnerabilities. Open source applications are exceptions because they can be maintained and critiqued by others. With all software though you have to justify the risk with the rewards. These applications also have to be updated, windows will not do it for you. Ubuntu will keep all your applications up to date which is a huge plus for linux security.

6. Don't install extra applications.
    When installing any application, use advanced install and un-check any offer to install additional applications. Even applications from Adobe and Apple ask to install something else, always say NO. If you are installing iTunes, don't accept Safari too. Don't install any software if you aren't going to use it.

7. Turn off nearly every program that is running near the clock.
    Programs running in the background are a huge risk because they can be listening for or communicating with the internet without you knowing. Each one also takes a little speed away from the computer. While turning all all unneeded background tasks can require a degree in computers, most of us can get the tasks near the clock to stop running. Of course there are windows provided icons and your virus scanner that must remain. But you don't need that office toolbar, Adobe updater, etc.

Ten Tips for Keeping Windows Fast and Secure (Part 1 of 3)

1. Use Firefox for internet browsing.
    Internet Explorer has been one of the weakest points in windows security. Using Firefox eliminates a huge portion of risk and supports web standards better than internet explorer. Did you know most websites run special compatibility code just for internet explorer?

2. Turn on automatic updates. Ensure it runs daily.
    Many people don't even turn on automatic updates. And if you aren't updating because your Microsoft Windows is an illegal copy, you are even more vulnerable. If you need a legal copy and have more than one computer in the family you can save money by getting a family pack. If you can not afford it, switch to Ubuntu for free.

3. Ensure you choose shutdown and install updates before turning off your computer.
    Every night you should choose to shutdown and install updates. This ensures updates are getting installed, it also reduces the number of lockups and slowdowns you can have from running windows too long. Also you are helping to stay green by not keeping the computer on all night.

4. Don't install browser toolbars or plugins.
    There are some exceptions but toolbars and plugins in general are another point of vulnerabilities and web speed issues. They just aren't worth the risk no matter how cute they are. Plugin exceptions are flash and ad blockers.

How-To: DOD CAC Card on Ubuntu 9.10 (Webmail, AKO, DKO)

Whenever I'm faced with a problem I first turn to google. I used to go to a particular forum and just search that but now the forum searches are used if google doesn't find the answer first. Well the other day I needed a way to use my CAC card at home. And I preferred to use it inside Ubuntu.

This is the article I used to configure my CAC: http://www.hrgeeks.com/2008/11/21/using-a-dod-cac-with-ubuntu-and-firefox/

Below I'm pasting the actual commands from the article above: (slightly modified as I noted some changes)

• apt-get install libccid pcscd coolkey
• In firefox  Edit-Preferences-Advanced-Encryption-Security Devices-Load
• Use DoD CAC for the module name and /usr/lib/pkcs11/libcoolkeypk11.so for the file.
• Click OK on the next few popups. 
• Back on the Security Devices page, insert your CAC, and make sure Login lights up. 
• You may want to make sure you have the security device under DoD CAC selected.

If you can't get the login button to activate, you may need to update the CAC reader or get a new CAC reader. I chose to just buy a new keyboard with a CAC reader from Dell.

Go to http://dodpki.c3pki.chamb.disa.mil/rootca.html and select each of the certificate links starting at the top. Firefox will prompt you, just accept the prompts. If you believe the DOD page has been hacked you can validate the certificates before accepting them, but that's up to you.

Finally go to the site you want to access (webmail, AKO, DKO, etc). For me I needed webmail. When I visited the site it asked me which certificate to use. I first selected the certificate that indicated it was for authentication. This didn't work and the site refused to work again. I undid this mistake by doing the following:

• In firefox  Edit-Preferences-Advanced-Encryption-View Certificates-Servers
• Find the website in the list and delete it.
  

Now go back to the DoD site and choose the correct certificate. For webmail access it ended up being the email signing certificate.

Here is the official Ubuntu help page. It may have more guidance if you get stuck. I didn't find this page until now so I wasn't able to use it.
https://help.ubuntu.com/community/CommonAccessCard

To Do Another Day:

• My browser asks for my pin and for me to choose the certificate on every visit. Not bad, but I would like it to remember the certificate.
• Enable email signing via webmail.
  

Project Ubuntu

I like the idea behind linux and open source. I like the cost in general which is usually free. Also I don't mind paying for good closed source applications which at least play nicely with the open source community, ie. runs on linux

In general I use the Ubuntu Operating System www.ubuntu.com for my day to day activities. It was amazingly easy to install and use. It runs much faster than windows ever has and I don't worry as much about viruses and spyware. I've given it to some people who love it and some people who didn't like it. If you are open to trying something new AND FREE, I recommend you give it a fair try. In the long run the benefits will outweigh any shortcoming.

If you need any help, there are local groups all over the world who would be happy to help you get going. You can find them here: https://wiki.ubuntu.com/LoCoTeams

If you aren't ready to take the plunge, I recommend trying some of this free software on windows:
Open Office - www.openoffice.org
A great stand in for Microsoft Office. It can open and save in Microsoft formats saving you tons of money. It also can save as PDF making life much easier.

Firefox - www.getfirefox.com
Excellent web browser recommended by geeks. While Microsoft Internet Explorer is free, in my experience it is too risky to use. Just by using Firefox as my browser I have saved myself from many viruses and spyware infections.

Picasa - www.picasa.google.com
Photo manager/editor. Not open source, but free. The reason I recommend it is because it is very user friendly and if you ever do move to Ubuntu it is also available there.

GnuCash - www.gnucash.org
Money Manager. I have used others and this application works very well. It allows import from many formats and has served all my needs well for the past year.

I believe that if you get used to using free software, you will want more free software. Also when you finally move to Ubuntu you will already be familiar with the majority of your daily software.

Ubuntu is free, but if you want to get some disks and a book here is a link for amazon: