This is not a ‘How-To’. It is more of a ‘What I Did and Why’. If you need specifics, go to the home pages of the people whos software I am recommending.
The objective was to secure an old XP system that stayed connected to the internet.
The first step is to dump all the un-needed Microsoft baggage. This includes IE, Outlook, Findfast, and other unecessary fluff. Update to SP2. Unless you are willing to allow Microsoft to use your computer as a free beta test site, turn off automatic updates. If MS can’t get it right after two major service pack efforts, all the updates in the entire universe are not going to fix the problem either. Perhaps the real fix is to enlist the aid of people who did not cause the problem in the first place. Dumb down networking to ONLY do TCP/IP with no file or printer sharing.
Install the following software.
Registry Cleaner – This program should be run weekly to remove registry entries for software no longer being used. No all uninstall programs clean up their registry entries.
CleanUp! – Gets rid of temporary files and more.
CCleaner – Like CleanUp!
Tiny Personal Firewall – Keeps data from being transferred in or OUT unless specifically authorized by you. Lots of programs call home for updates and other unecessary nonsense. TPF allows you to control such activity.
WinPatrol – Patrols Windows. Freeware version is paticularly usefull in managing startup programs and services. Consider upgrading to the plus version for $50.
Malwarebytes – Scans system for bad software and viruses.
Cookie Monster – Eats cookies.
Acronis True Image – Backup software. We clone drives for backup. That provides secure backup agaist all possible sources of failure or loss. ‘Cloud’ services are not secure and cost as much as a spare hard drive. DVD and CD backups may not last more that a few years. NOTE: The DD command under Linux can also clone hard drives.
VLC – Video player.
Thunderbird – Email
Irfanview – JPG viewer and more.
K-Meleon – Simple dumb browser.
Firefox – Simple smart browser (needed for Netflix). Install the adblocker add-on.
WWW.grc.com – Advice on security. Checkout the MICE problem.
TightVNC – TCP/IP server and client. Better and simpler than all the MS networking baggage put together.
Then use WinPatrol to investigate services. Windows XP is notorious for wasting computer resources on services you may not need or want.
Dumb down Users. Most home applications are fine with a single user and password shared among family members. No need to allow anyone else local or remote. You definately do not want a ‘Guest’ account.
Turn off indexing. If you have more than 500,000 files, indexing might be useful, otherwise it is just an unecessary burden.
Add content to the Hosts file. Many websites live off advertizing. When browsing the internet I am not interested in viewing advertizing. It is always the junk products and services that get advertized the most and I don’t want to waste my time and bamdwidth suffering through their nonsense. So I use the Hosts file to block them. They get blocked by equating their IP address to the local host. Do a Google search on ‘Hosts’ and you will find several sources providing ready made Hosts files. Caution: very, very long hosts files will increase website discovery time. The website will still load quickly but it might take a while to find it.
The preceeding lists things that you should do to secure the computer. The following are things that you should think twice about doing or avoid doing all together.
Do not disclose any personal information unless it is required for a one-time business transaction. This means you do not open accounts and permit the vendor to keep your private information on file ( where it can be hacked or stolen). Yes, I know they have a ‘privacy policy’, and when you read it you will discver that the ‘Privacy Policy’ allows them to do whatever they want with any information you give them. Why? Because disclosing information on the internet makes that information public.
Do not ‘sign up’ or register on a website when invited to do so. This happens frequently on stories listed on the Drudge report. Some even go so far as requireing registration before they allow you to read the story. Publishers that act this way are despewrate to build databases of prospective costomers. Most likely because they are loosing customers and influence due to publishing uninteresting drivvel in the past. These sites are excellent fodder for the Hosts file.
Don’t allow your browsers to manage or remember passwords, or keep a history of websites visited, or allow cookies to linger. All such information shoud be dumped upon exiting the browser.
Many news story sites allow you to comment on the story but first they want you to identify yourself by giving them your email address. Don’t give your actual email address to strangers or you might find yourself having to change it to avoid all the spam you will be getting. Besides, no one really cares what you think about the story or anything else. They just want your email address because they can sell it.
Do not leave your computer on unattended unless it is doing something useful for you. It used to be that monitor power was derived through the computer power supply. This was before you could easily turn off the computer through software. In those days you used the big red switch on the power supply to kill everything. I am pretty sure you can’t kill the monitor with software on a ‘modern’ computer. I am also sure that you could add a relay inside the power supply to do just that.
Facebook and Twitter. I have no use for these services. Wouldn’t it be neat to share your pictures and stories with your friends and relatves over the internet? It would be neat to share those things with friends and relatives, but not through public websites with the whole world watching. If you must use the internet in this manner, open a private website with restricted access to prevent ‘big brother’ spying on you. The term ‘big brother’ does not always refer to the government.