Re: lock down personal Win XP workstation

[Michael Krymson <krymson () gmail com>]

I would definitely not use IE (use Firefox) nor use Outlook (Thunderbird?).

Make sure your local administrator account password is secure.

Clanwin is a free antivirus product which I highly recommend (I am with
you, why pay for it?).

IRC is cleartext, I believe, so if you're on a laptop, be sure you use
IRC over public wireless sparingly. Sames goes for mail. Also for a
laptop with wireless, be sure Windows is set to not automatically
connect to any open wireless in the area.

The good thing about your setup is that you know what you're using it
for, and nothing else. Anything else odd will hopefully stick out,
including errant processes and such.

Those are just some ways I would attack you if you were a mark. If
you're on a desktop, you don't have much to worry about other than email
attachments and viewing web pages in IE. If you're on a laptop, I can
learn a lot about you at a public hotspot, such as your email address (I
can then send you crafted stuff), your SSH servers that you connect to,
your IRC servers, etc. I can learn a lot and possibly prey on you
directly, but it all requires you to be careless. Sounds like you're
pretty vigilant as it is, so that should be ok.

sun sadm wrote:
> Hi colleague,
>
> Sometimes I am forced to use Windows XP. I only run a Usenet, web,
> IRC, mail, ssh client and music player. I regularly check for security
> fixes.
>
> To lock down my workstation I enable "Windows Firewall" to block all
> traffic expect the applications mentioned above. I enabled "Automatic
> Updates". Additionally I use "Security Configuration and Analysis" MMC
> console and apply the predefined security template called hisecws.inf.
> I don't use a virus scanner because I am not a license owner.
>
> How secure is this setup? Are there ways an attacker can break my
> system? Where are vulnerabilities? How would you break my system?
>
> Nico
>
> ---------------------------------------------------------------------------
>
> This list is sponsored by: Norwich University
>
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The NSA has designated Norwich University a center of Academic
> Excellence in Information Security. Our program offers unparalleled
> Infosec management education and the case study affords you unmatched
> consulting experience. Using interactive e-Learning technology, you
> can earn this esteemed degree, without disrupting your career or home
> life.
>
> http://www.msia.norwich.edu/secfocus
> ---------------------------------------------------------------------------


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------