Forum Home
Press F1
 
Thread ID: 123866 2012-03-21 16:31:00 Keeping hackers out of my computers lostsoul62 (16011) Press F1
Post ID Timestamp Content User
1266191 2012-03-21 16:31:00 www.amazon.com

This is a book I found on amazon.com and wanted some advice. I was a MIS manager in Silicon Valley for over a decade and had to take care of securing networks but didn't really have to worry about hackers. I have a network at home and would like to know something about security and I'm not talking about anti-virus and firewalls but defend against hackers. I've been retired for 10 years and I don't know anything against someone hacking into my computers but would like to learn. So is this book what I need or do you have a better one to recommend?
lostsoul62 (16011)
1266192 2012-03-21 18:30:00 Best advice: Sit behind your routers NAT. This will prevent direct access to your PC via TCP / UDP ports. Since the days of dial-up and fully exposed PCs are long-gone, it's a non-issue for most people.

This means the only way they can get to it is if you let them through the use of something such as your browser or installing rogue software etc
Chilling_Silence (9)
1266193 2012-03-21 19:29:00 I was a MIS manager in Silicon Valley for over a decade and had to take care of securing networks but didn't really have to worry about hackers.

Same thing.
Actual hacking is rare on home PCs, the screamingly obvious is like those scammers lately that ring up saying you have viruses and they will (eventually) remote in to your PC and also get your credit card number so you can "pay them".

Also malware downloads - keyloggers and such.

Antispyware as well as antivirus takes care of that, plus using common sense.
pctek (84)
1266194 2012-03-21 19:48:00 Set the DMZ of your router to an unused LAN IP and any incoming traffic gets the impression there is no computer there, about as good as it gets without going crazy. dugimodo (138)
1266195 2012-03-22 09:51:00 looked interesting so I bought it on my kindle. Just tried one of the google searches it talks about in the early chapters changing a few of the search terms. Surprised that I could find excel spreadsheets of username and password lists from companies on the net, one even had a list of their access to external accounts e.g email, facebook, twitter, suppliers!! Why would you even post that on your internet site regardless if the url is hidden or not!! Navigated away before I was tempted to actually try any of them but I guess it just goes to show some companies have no idea whatsoever about securtiy. Barnabas (4562)
1266196 2012-03-22 11:28:00 Best advice: Sit behind your routers NAT. This will prevent direct access to your PC via TCP / UDP ports. Since the days of dial-up and fully exposed PCs are long-gone, it's a non-issue for most people.

As far as I know, NAT was never actually designed for security, it just ends up kinda working that way.

Since IPv6 solves the problem NAT was designed to work around - that the IPv4 address space is too small - if you use IPv6 you may not have a NAT to hide behind...

(Unless I'm missing something!)
Agent_24 (57)
1266197 2012-03-22 14:48:00 (Unless I'm missing something!)You're not missing anything :thumbs:.

If you're not using NAT, a properly configured stateful firewall can provide exactly the same result from a security perspective (i.e. drop all incoming packets that aren't related to an existing connection).

Note that the above refers specifically to the typical 'home' NAT used to share a single external IPv4 address among several devices. There are many other forms of NAT with very different security implications.
Erayd (23)
1266198 2012-03-22 22:38:00 This is also why I have zero faith in Cloud storage.

What is truly worrying is the clowns in Govt departments and banks blindly uploading all manner of stuff onto a cloud. It'll make the recent ACC privacy BS look trivial by comparison.

Until such time that ALL employees are taught basic online security and standards of behaviour we're all potentially exposed to massive breaches.
Paul.Cov (425)
1266199 2012-03-22 22:49:00 On top of the security issues, I don't trust cloud anything very much because it's even easier to be there one day and gone the next.

Look at what happened to Megaupload! Anyone who was using that for legitimate uses may well be screwed.
Agent_24 (57)
1