Interesting article regarding computer security

sherlock62 wrote:

Bluecoat was in it's prime in 2012 or so. Today, forget it. Not current so leaves you with iffy filtering, etc. As for Open DNS... aok.

I've found that AdBlock Plus/AdBlock Edge, running the browser in a sandbox and/or VM, enabling "click to play", and when actually downloading an executable, running it past VirusTotal provides enough protection.

The only two AV utilities I've found worth the time of day is Malwarebytes, and the reason I mention that, is that it blocks by IP. The other utility is SpywareBlaster, and the nice thing about this utility is that it only runs to update blacklists, like Windows killbits, sites blocked from setting cookies, restricted sites in Internet Explorer, etc.

I like keeping things simple. By isolating the web browser in a sandbox of VM, if it gets infected, the damage is quite well contained. To prevent the browser from getting nailed in the first place, the bad sites get blocked.

As for security, NIST has some good guides and checklists for securing an OS. They are likely way past what a home user needs, but can be useful as a starting point.

SCVJeff wrote:
So let me explain it the other way...
OFTEN people here make reference comments to things that they thought they included in the comment. While you're change in punctuation does change that, I'll bet you had no idea that there is a real program called Security Onion that we've been using on Linux boxes for over 5 years. It's not just a term

Sigh - yes I did know. I am an IT Systems Manager. :W

The funny thing about freak is that it is due to the US Feds mandating weak, broken encryption. Remember downloading Netscape Navigator and having to swear you would not export the strong encryption versions.

I think it is also funny that people will spend big bucks on hardware, and then use the free versions of maleware protection and anti-virus. the companies that have free versions also sell BETTER versions that offer much more protection.

It comes as no surprise that vulnerabilities which may have existed for years, are only now being discovered. The latest effecting both Android and Apple mobile browsers, allowing vulnerable websites to use weaker export-grade encryption mandated by U.S. law, giving a potential gateway to hackers to break the encryption. Even WhiteHouse.gov and FBI.gov were vulnerable but have now been patched. Chrome browser was not affected. See the article here at Apple plans fix next week for newly uncovered Freak security bug.

Martyn wrote:

SCVJeff wrote:

Martyn wrote:

SCVJeff wrote:

wa8yxm wrote:
There is (Far as I know) no company by this name but I believe in Onion Security

Layer upon layer upon layer.

What name?

Onion Security :S

read it again....

I suggest you do - the poster may not have used good punctuation, but it makes sense... here, I'll modify it for you....

There is, as far as I know, no company by the following name, but I believe in 'Onion Security'
:S

So let me explain it the other way...
OFTEN people here make reference comments to things that they thought they included in the comment. While you're change in punctuation does change that, I'll bet you had no idea that there is a real program called Security Onion that we've been using on Linux boxes for over 5 years. It's not just a term

SCVJeff wrote:

Martyn wrote:

SCVJeff wrote:

wa8yxm wrote:
There is (Far as I know) no company by this name but I believe in Onion Security

Layer upon layer upon layer.

What name?

Onion Security :S

read it again....

I suggest you do - the poster may not have used good punctuation, but it makes sense... here, I'll modify it for you....

There is, as far as I know, no company by the following name, but I believe in 'Onion Security'
:S

bwanshoom wrote:
The study that the article links to doesn't even list Android which seems very odd. While iOS has more vulnerabilities disclosed at least the fixes reach the customers in a reasonable timeframe.

Not always. There was a known PDF exploit that apparently existed in iOS for years. So bad that some foreign governments banned Apple mobile devices from being used by employees. But, overall, I would agree that Apple does a good job patching most vulnerabilities in a reasonable time period.

Martyn wrote:

SCVJeff wrote:

wa8yxm wrote:
There is (Far as I know) no company by this name but I believe in Onion Security

Layer upon layer upon layer.

What name?

Onion Security :S

read it again....

There's plenty of blame to go around - and Microsoft is far from innocent. While Apple may top someone's list of "vulnerability counts" what matters to hackers is the probability of a successful exploit.

1) There are far more Windows machines than Apple based ones.
2) There are still many unpatched Windows machines
3) There are still many holes left unpactched with new holes coming every day to Windows
4) It's not just the OS anymore but applications like Flash


Why did Willie Sutton rob banks? "Because that's where the money is."
Why do hackers target Windows machines? "Because that's where the holes are." :)


I've been running a Linux based desktop for a long time.
And - when possible - I make my kids do the same. :)