How to protect your computer from the Internet

There is one correct answer to this question.

Never connect it to the internet.  EVER!

RSA FOB

Now, I know that that sounds a little strong, but it is 100% true.  As an example, RSA (a Division of EMC) one of the leaders in protecting corporate information from the internet got hacked.   RSA has these little devices that allow for something called multi-factor authentication.  This is the best way to ensure that the person who is logging into a system is really allowed to log into the system.   

How bad did they get hacked?  So much so that every FOB out there (oh, there is about 40 MILLION of these) is now compromised.   So much so that some US Government agencies are now throwing out all their FOBs (that is what you call them) and moving to a competitive product.  More of the story here.

According to ZDNet, security expert Dan Kaminsky says that it is not impossible that the database that links SecurID serial numbers to seeds (card's factory-encoded random key) has been compromised, which would mean that the attackers would be able to know all generated tokens at any given time and even know which organizations are using them.

Apparently those that broke in must have gotten hold of the secrets that associate the serial number (stamped on the back of each FOB) with the just how the magic number (which changes every 30 seconds) is generated.

So, if they can't do it right, just how does anyone like your Mom, Dad, etc. stay safe on the internet?  (Speaking of which, my 86 year old Dad managed to get a virus on his system, so it needs to be totally rebuilt).

So option one (stay off the internet) is pretty difficult.  Plan B is:

• Make sure you Antivirus is updated daily (I like Microsoft Security Essentials)
• Make sure you install all the security updates from Microsoft, Apple, Adobe, etc.  
• iPAD's are great devices to surfing the net due to their architecture (called Sandboxing)
• Don't click on ANY link in ANY email even IF you know who it is from
• Don't go to any website that isn't mainstream -- yep, difficult to do as even The New York Times web site got compromised

Did you know that it is possible to get a virus just by having a web browser load a picture on your computer....And you did nothing wrong.  

For my technically talented friends, it is now possible for a Virus to hide in the firmware of your video card.  What this means that after you get your computer cleaned out by starting fresh (see below), the virus resurfaces and installs itself again.  Then, you get to start over... and over and over.

What happens IF (make that WHEN) you get a Virus??

• Somehow, move all your data/documents to another disk drive (you do have a backup, don't you?)
• Reformat the hard drive (start with FDISK is always good)
• Rebuild your computer from scratch
• Restore the backup you have

Don't let anyone else tell you that your system can be cleaned without doing the above.  Not the Geek Squad, Not Staples, Not Anyone.  You might think that it is clean, but you will never ever know.  There isn't a software tool out there there can tell you 100% that your system is good again.