An article about updating Microsoft security has generated some comments and direct messages about becoming infected with malicious software (malware) while on Open Salon. There is an easy step to avoid this.
Most likely, you are on a machine where you have administration privileges. This means that you can do such things as selecting a piece of software and installing that program on the computer. That sort of upgrade may happen infrequently but, as the owner and administrator of the computer, it is something that you are allowed to do. Most people operate the computer on an administrator's account. A safe guess is that you are doing so, at this very moment.
The problem is that, if a hacker or cyber-criminal bypasses your computer security, the administration account allows the intruder to install malware on the computer. To avoid that, create an account that does not have administrative privileges. That account means that it is still possible to do the daily online things such as check email, browse sites, post to Open Salon, use instant messaging and so forth. What that limited account does not allow is installation of software.
If you do find a program that you want to install, simply switch back to an administration account and install that software. It is simple to switch accounts. If you are on a non-administration account and your computer is compromised, it is far more difficult for the hacker to install a malware program. The account that you are using simply will not allow it.
A non administration account is called a "LUA", which means Least Privilege Account. Here is a part Microsoft discussion on the topic:
"... Limited user accounts significantly reduce the attack surface for malicious software because these accounts have minimal ability to make system-wide changes that affect operational security. In particular, limited user accounts cannot open ports on the firewall, stop or start services, or modify files in the Windows system folders."
Don't let the 'tech-speak' deter you. Creating a new account is not difficult. This is a simple way of protecting your computer from infections. You will not notice the difference when you using the non administration account for your daily activities. That means that, while you are on that non administration account, you can click on an Open Salon link someone has provided and feel fairly safe that malware will not be installed on your computer.
Catherine Forsythe
some additional links:
TIP:
Enter the amount, and click "Tip" to submit!
rugrat
ccdarling
Erica K
Director of Studies
Stephanie Russell-Kraft
Jeremiah Horrigan
Salon.com
Comments
Duane, nice to know about your prophylactic habits. And look forth ways before you cross the information highway.
So far, so good.
{[R]}
(R)
Hey Brian, did you keep the shipping material for the computer? Ship it to me when it turns into a brick ;)
Matt, you should be issuing 'avatar change' warnings!
Fusun, you're welcome. Thanks for your support. I know that computer security is never a popular topic on these pages.
I'm going to try this because I did get a malicious attack on my computer a few weeks ago. Don't know where it came from. But (and this is a separate question) how did my networked computer (non administrative priviledges) at work get a virus that spread to other computers (that used the same program) through out our office? Just curious...
Nelle, I was waiting for the first Apple comment. Steve Jobs loves you!
I don't know if it is an ongoing problem. I would not be surprised if Open Salon was a target. You well know that this site is a spam target. Your posts have demonstrated that amply.
When I posted about the recent Microsoft security patch in another article, some people mentioned about malware in the comment section and through direct messages. I thought it would be far better to post something, as a preventative measure, rather than be reactive once the malware has struck. As I mentioned, computer security is never a popular or well-read topic on these pages. People make the assumption that these infections happen to other computer users.
Good luck with your school term - and thanks for your support on these pages.
After the ibuprofen kicks in I'll see if I can make sense of this. I'm sure some have been helped and your efforts are noted.
aka, I hope it was not Open Salon that necessitated the use of an analgesic.
I'm with Nelle, though I'm not an evangelist. I believe that people should use what they want to get their work done in the best way possible, but viruses and malware are just off the radar in my mac centric office ( that's a pic I posted on an OS article here). The pic is actually out of date, since there's newer equipment in here now.
In the pic, there's one lonely PC in the corner, which even with firewalls in place for wired and wireless access, it was plagued with problems--mainly because my youngest son was really the only one to use it, and he was never careful with what he downloaded. But even though he got virii through the firewall, it never affected any of the macs on the same network. Again, I don't care what people use, but I'm lucky I just don't have to worry about it-we're such a small unproductive target for the bad people.
Thanks again for a very useful blog, with good links.
Andy, an Apple representative will be in touch. Please make sure there is enough room on your credit card(s).
I'm now unemployed and don't have access to the wonderful (and entertaining) world of geeks. I don't like missing out on mysterious happenings as I sleep!
Let me start to answer that with an analogy. Imagine that you are on a long street, where you know that thieves lurk. They will try the front door sometimes to see if you have it unlocked. They know that some people leave their doors unlocked all the time and some people leave their doors unlocked only part of the time. It is far easier for the hackers to plague the people who leave the door open all the time.
Now, how that analogy relates to computer security. When I leave the door open, personally I want to be there and monitor what is happening. I monitor the security downloads and the definition updates. That means that the "front door" is only open for a very short time and I am there to make sure that nothing bad is going to happen. I do not allow automated update processes. I want to do it manually.
There is another reason I have for doing it this way. There are some programs that update and force a computer restart. Sometimes, that may mean that you have left work in progress on your machine when you went to bed. When you return, you might find that the computer has had a forced re-start. All that work that was in progress on your computer has vanished.
These are just a few of the reasons that I do not like the automated update. It simply leaves the door unlocked and open - and for much too extended amount of time for my liking. I am certain that other people would disagree and think that this is overly cautious. However, I would prefer to error on the side of caution rather than thinking that the risk is small and 'it won't happen to me'.
Is there a computer virus hitting Open Salon?
I pre-programmed my kids and one did escape two potential rapists with minor injuries only. I will not go to sleep or leave the house with my computer running again. I loved the analogy because it's now part of my thinking process about computers. Thank you for keeping me from having headaches, I have enough to worry about.
l'Heure Bleue, I am grateful that some people are interested in computer security. It always surprises me that more people are not.
TWS, thanks!