Worst Pc Security Mistakes Users Make

[nikita69]

I'm interested to collect and find out what your thoughts are about this topic. Kindly list them in lines, not sentences. Stay within the category of PC SECURITY and include links/references if ud like. After collecting ur thoughts, i'll be compiling it to elaborate more in depth, then post it in full. thx. did not install an anti-virus program
did not maintain the virus definitions
did not update windows patches
did not update softwares' patches
did not remove windows features that could leave the pc vulnerable
did not enable windows ICF
did not install a professional firewall
did not install an anti-trojan program
did not optimize the settings of each program to eliminate the possibilities of ulnerabilities
did not setup a hi-anon proxy that doesn't leak the IP and cannot be reversed DNS
did not investigate first before downloading a file
did not investigate first before accepting cookies, active/x and other possible privacy data collection tools
did not read and/or research about the software before installing
did not create system Policies
i'm sure i didn't list all....

[zapjb]

Did not stop using IE & OE. Didn't get Spybot Search & Destroy. No popup blocker. Didn't scan system at least once a week. Let's idiots use their computer.

[The Kiler]

Shut off firewall because it made internet slower

[asmithz]

Hey you have to add this.

Installing the beta SP2 for Windows XP.

(Makes some programs incabatible. Also you cant install it becuase it changes the windows kernal and thinks its not a Windows OS. That also makes it so you cant use windows Update)

:lol: :lol: I am an idoit! :lol: :lol:

[nikita69]

is that all. 3 responds?
Agent, ur not, i hope u learned from ur mistake. :)

[fkdup74]

Originally posted by nikita69@5 November 2003 - 19:08

did not turn on the enable windows IFC

elaborate on that one plz...

[Kunal]

Originally posted by FKDUP74+6 November 2003 - 17:34--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (FKDUP74 @ 6 November 2003 - 17:34)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin-nikita69@5 November 2003 - 19:08

did not turn on the enable windows IFC

elaborate on that one plz... [/b][/quote]
IFC (Internet connection firewall) suprisingly works as a basic firewall, i doesnt really slow down the internet speed so it should be activated by default.

[fkdup74]

hmm...maybe a typo by nikita? :D
i&#39;m knowin about the windows f/w,
but i saw IFC and thought i missed
somethin (would be ICF for f/w, no?)

[3rd gen noob]

Connected to Internet

:rolleyes:

[Kunal]

Originally posted by 3rd gen noob@6 November 2003 - 17:49
Connected to Internet

:rolleyes:
true true

[nikita69]

Originally posted by FKDUP74@6 November 2003 - 23:44
hmm...maybe a typo by nikita? :D
i&#39;m knowin about the windows f/w,
but i saw IFC and thought i missed
somethin (would be ICF for f/w, no?)
corrected, thx. :)

[MediaSlayer]

didn&#39;t enter customized settings for java,javascript,active x,ect... in "internet options" in ie
didn&#39;t properly set up a "fixed" hosts file, didn&#39;t save the original
installed a program that f*cks up associations(real stupid player f*cked mine up even though during install i only gave permission to be associated with a few files)
and therefore icons
installed a go back program with system restore turned on, potentially causing conflicts

[cosmic doobie]

Originally posted by Kunal@6 November 2003 - 17:37

IFC (Internet connection firewall) suprisingly works as a basic firewall, i doesnt really slow down the internet speed so it should be activated by default.
Are you being seery arse <_<

[fkdup74]

Originally posted by nikita69@6 November 2003 - 10:30
corrected, thx. :)
aww, no prob, just wanted to be sure i didnt miss somethin that could be causin vulnerabilities, and btw, cool post :)

[LTJBukem]

- Not passwording OS accounts.

ps. what are ulnerabilities? :P

:)

[nikita69]

didn&#39;t install win 2k or above (still using 95 or 98)
didn&#39;t change the name of "administrator"
didn&#39;t use complex account names

[Risknothin]

i went to grc.com and ran the sheilds up tests and got the same results (all stealth) with
1. Zone alarm enabled but windows firewall off
2. Both enabled
3. Zone alarm off and windows firewall on

and most of my ports were stealth if they were both off

how is that?
what is the point of having zone alarm on if the windows firewall does the same thing?

[O'Neill]

Originally posted by nikita69@6 November 2003 - 03:08
3. did not update windows patches

LMAO
I refuse to update windows as antime I do I have to reinstall my OS (regardless whether its 2k or XP)

And anyway the largest spyware in the world is, believe it or not, Windows itself, you would be surprise how much info it sends out thro the net, the only reason why it dominates the market is cos too many programs will only work with windows

[nikita69]

Originally posted by O&#39;Neill+7 November 2003 - 04:10--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (O&#39;Neill @ 7 November 2003 - 04:10)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin-nikita69@6 November 2003 - 03:08
3. did not update windows patches

LMAO
I refuse to update windows as antime I do I have to reinstall my OS (regardless whether its 2k or XP)

And anyway the largest spyware in the world is, believe it or not, Windows itself, you would be surprise how much info it sends out thro the net, the only reason why it dominates the market is cos too many programs will only work with windows [/b][/quote]
maybe this clarifies it.

Did not DISABLE Windows Autoupdate
Did not visit sites that monitor Windows volun.
Did not research first before updating.

frankly, that&#39;s what I meant and goes to ALL installed software in the pc. I felt i&#39;d explain it more in details in the final doc. YES, M&#036; is spying on users, DAILY. I have several supporting docs to this. the latest is the hardware they&#39;re introducing to the market, ie network cards, xbox.

[4play]

1) opened that "i love you" e-mail :(
2) ran unneccesary services
3) thought es5 sounded cool.
4) not running microsoft baseline security analyzer
5) did not check out the microsoft security tools page (http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/default.asp)
6) uses a mainstream operating system.

[longboneslinger]

Trusting Windows to encrypt your data. Trusting ANY M&#036; security...... :swear:

Heres 2 basic but unforgotten security measures:
1:Figure someone, sometime, somehow is gona get in and at the least snoop around for something like a CC number. :ph34r: Use encryption software that leaves no &#39;backdoor&#39; or master key. Make the key string damn long and damn screwy. Say like- 531purpledogspeegreenstring291feetlong It&#39;ll take&#39;m more years than its worth to brute force that one&#33; :w00t:

2:Get a file shredder. The Windows delete function just removes the read/wright tag from the file and opens the cluster(s) to be written to. Even after the cluster(s) have been written over several times, the data can still be recovered.

3:Shred the original. What goods encryption if the original is just lying around wating to be found?? >_<

All of the above software types can be found for free on the net. Try www.cnet.com/downloads for a freebie, shareware, or just buy some...or shareware/crack/keygen......but I didn&#39;t say that...o:)


Just a thought, but with the sheer amount of security leaks in M&#036; Windows products as a whole, does anyone really want to use their firewall?? If it works 10 times better than Windows security in general, that ship would still sink before it left the dock&#33;&#33; :flame:

[mulch]

How about Admins that leave the Administrator account running all the time?