Basic Security Outline

[DelJo63]

Basic Security Outline

PC configuration:

[1] Set the Administration password
not the same as your limited access account

Get off the MS Account and use a LOCAL ADMIN ACCOUNT
https://support.microsoft.com/en-us...-create-a-local-user-or-administrator-account


[2] Use a login that has Limited Priviledges
create a Local limited account (using your name)
set a unique password


*** Win/8, 8.1 &10 enforce items 1+2. Win/xp & win/7 you'll need to set this up for yourself

[3] Disable Remote Management

[4] Run with an active firewall
set the network type to public (unless you need print/file sharing)



Network configuration (aka the router setup)

[5] Be sure to get the latest firmware for your router and check for updates monthly!

[6] Change the router's Admin password -- the defaults are documented and known around the world!!

[7] Disable Remote management and port 8080

[8] Save the configuration and reboot

[9] Create a network ID (aka SSID) you like, but that does not identify YOU!
create a WPA2 passphrase
(at lease One UC and LC character, a number and a special charcater #$*+-)
EIGHT characters long or more

[10] save and reboot again

Notes:

[4] If you need print/file sharing, then set the Network Type to PRIVATE

If your system is portable and you want access from a hotspot,
set the network type BACK TO PUBLIC before you connect

 

[TheDevopsGuy]

Hello @jobeard in regards to the security aspect of computing nowadays. How would you rate password managers over the browser password managers in terms of security?

I'm not so keen on having a single point of failure with all my passwords. Even though you can secure it alot. What if there is a Zero day attack and everything personal is stolen? What would be the best procedure in handling passwords on the internet and local?

 

[DelJo63]

What would be the best procedure in handling passwords on the internet and local?

I'm flat paranoid on ANYTHING that stores userid/password pairs. I'm not a young rooster any longer but I can generate my own passwords w/o recording them or writing them down -- I just use patterns that make sense to me.

 

[maxsava]

Can you disable push notifications by app and category on iOS? Ever since Android introduced that my phone experience got much better. Some apps only have one category, but many now have a separate promotions category allowing you to turn off or mute just that category

 

[annew]

Thanks Jobeard, why do we need to block port 8080 ?

 

[DelJo63]

Thanks Jobeard, why do we need to block port 8080 ?

It is a common port for remote control of both systems and websites

 

[annew]

That's good and what about port 3389 rdp ?

 

[learninmypc]

That's good and what about port 3389 rdp ?

May not answer your question,but, https://en.wikipedia.org/wiki/Remote_Desktop_Protocol

 

[annew]

I'm blocking RDP 3389 too and it works well, thanks learningmypc