Securing Windows XP

[PCBruiser]

Originally Posted by perris

let me add something that I think you missed;

the default log in is root in xp...surfing the web should be done with restrictive rights

everyone should have a default web account that's not administrator

PS, I stuck the article at osnn and it's getting nothing but accolades

Good point. Something we should add in the next version. And, please let us know if you see any other errors/omissions as well.

And, any other member please feel free to offer constructive criticism as well.

[PCBruiser]

...bump...

For members who might have missed this thread and the members-only downloadable document it links to.

[TweakHound]

C'mon folks, we had to have missed something, not explained something well enough...
We need your feedback!

[Finalheaven]

I'm using it now, going step by step. I don't think I'll be the one to find something. I love it so far. great job. I'll post when I'm done.

[TweakHound]

As of yesterday, page 1 of the guide at my URL received 13239 unique visitors. Not bad

[grsamf]

Originally Posted by TweakHound

As of yesterday, page 1 of the guide at my URL received 13239 unique visitors. Not bad

Not bad? I might go so far as to say pretty good.

As for additions, things not explained well enough, etc., I agree with Perris that emphasizing the dangers of surfing with administrative rights should be added. The only time I log on as administrator is to install programs, drivers, etc., either from disc or that I downloaded with a restricted user log-on. Even then, I disconnect my cable modem. The only exception is updating windows.

IMHO, in terms of additions and expansion, I think you should consider the point of self-defeat. The guide as it exists is relatively short, very well organized, and easy to "get around in." Many people take a look at something like this and decide it's too long or too complicated and end up taking advice from people like the computer systems administrator at my office who tells people that keeping their AV updated makes a firewall unnnecessary. Yes, he really said that.

I will also repeat my thanks, aprpeciation and congratulations to you both for your efforts.

[perris]

Originally Posted by grsamf

Not bad? I might go so far as to say pretty good.

that really is the best compilation I've seen, and it seems pretty simple for even beginners to follow.

great job.

[PCBruiser]

... bump for members who have not seen this thread.

[PCBruiser]

... another bump for the same reason, and also check out the Front Page Poll on this subject here:

Internet Security Poll

[surfandcross]

On page 2 of the document "wireless section" why you recommend to disable the "wireless zero" and use connectivity software provided by your wireless hardware manufacturer ? is there any particularly reason for it ?

[PCBruiser]

Yes, in most cases "Wireless Zero" either doesn't work, or works poorly. If it works for you, fine. If not, then dump it and go with the drivers/software provided by your hardware manufacturer. In any case, if you install your hardware manufacturer's drivers AND use "Wireless Zero" they will conflict almost all the time.

[surfandcross]

Originally Posted by PCBruiser

Yes, in most cases "Wireless Zero" either doesn't work, or works poorly. If it works for you, fine. If not, then dump it and go with the drivers/software provided by your hardware manufacturer. In any case, if you install your hardware manufacturer's drivers AND use "Wireless Zero" they will conflict almost all the time.

i see, i have no problems using windows wireless (if i use it), but i guess people do have problems with it. great job !!!

[deg]

I also did not notice a listing of hardware routers that had firewall implementations that supported any of these features. I think a listing of which brands support which features would be capital!

[PCBruiser]

The problem with that is that a list of that sort can change frequently. And, we were not looking to test all the possible hardware/software that is out there. Now, if you do a little looking around here, you will find many threads about routers, which ones members use, which have SPI, etc. If you have questions about a specific one or ones, one of us can look at the specs and check to see whether it has proper protections. Unfortunately there are hundreds of routers available these days, and we simply aren't equipped to do comprehensive hardware testing on any reasonable number of them.

Not to say that isn't a good idea, just that it was impractical for us.

[menelik seth]

I'd like to thank Tweakhound and PCbruiser for this very informative and educational document.

I'm a network novice who is currently considering networking his house, allowing access to our Broadband Internet connection. This will be a huge help in keeping the family PC's safe from attacks...

Thanks again