No.1722
How do you manage computer security in your devices?
I feel that just common sense isn't enough nowadays, because of several reasons:
- Browsers especially (even if you disable JavaScript, which is often not feasible in many sites), but also email clients, torrent clients... can all be exploited somewhat easily.
- Some games require kernel-level anti-cheats, which have complete access to your computer. Even if you trust the developer, these kernel drivers are often buggy and can be leveraged by malware.
- Legitimate programs or Steam games might receive malicious updates if the developer or their supply chain is compromised.
- If you use third-party dependencies for development, you might also be compromised if any of them (or their recursive dependencies) are malicious, not uncommon in ecosystems like npm.
- If you play doujin games or eroge, you often have to download them from random untrusted sources.
I've concluded that it's not really possible to trust a computer if you use it for activities like these.
I'm thinking about getting a second device only for sensitive stuff, like banking, shopping and managing passwords. It seems a bit of a hassle, but I can't think of any other way.
No.1724
>>1722i think you're being overly paranoid
also, dunno what your bank is like but it has been i think a industry norm for like 15 years to require MFA for basically every action you take
anyway, if you really that concerned you could look into getting a hardware token instead of a brand new device, or virtualization/sandboxing
No.1725
Even if you use trusted and expensive services you can still get super fucked if the someone up the chain pushed out a bad update, such as what happened to microsoft a few months ago with their security provider.
The only way to be completely safe is to physically isolate your hardware. Cant get a virus if it cant connect to you. Doujin and ero games are stuff I put onto my old laptop which is more convenient to sit in bed and play, and if something goes wrong with my dolphin porn I'm not losing much. It's also a good idea to get your "illicit goods" from trusted sources. A lot of this can be avoided with just paying attention to where the link goes.
No.1727
>>1726This,
OP and anyone who is interested in securing their electronic devices should define their own threat model before implementing solutions.
Anyway, most people only want to be safe from cybercriminals and this advice is probably the most important. If I wanted to add one more specific, I'd recommend to create a separate account for administration tasks (done by default on most Linux distributions but not on Windows).
No.1730
>>1722Backup your files in case of ransomware.
Don't reuse passwords.
Having a USB containing a small OS that loads into RAM and doesn't touch your HDD could work, like Puppy Linux or Slax.
There are small things you can do that don't necessarily fall under "don't click on weird stuff".
No.1731
I don't keep any passwords on my device, after I got a virus that pulled all mine from Firefox's password cache.
Don't let your browser remember passwords, it's stored basically in plaintext as far as viruses are concerned.
No.3664
>>3663Oh shit I was actually looking at Bitwarden the other day. Might stop being a retard as well, I see there's also a KeePassXC.
No.3667
>>3664I've seen people recommend Bitwarden as well, but it looks like it costs money? I'm not too sure on the fine details of if it's actually better than KeePass or not.
No.3668
Oh, Bitwarden is cloud-based. Thought I saw some people saying they ran self-hosted versions.
No.3669
>>3663>encrypted excel fileI used to store all my logins on my phone as plain text notes before I switched to KeePass...
No.3672
>>1722>If you play doujin games or eroge, you often have to download them from random untrusted sources.I got a ransomware from a game I downloaded on recommendation by an anon from 4jp. God knows why the malware didn't execute it's payload. I was running it on a Windows 7 machine and I think I even had Windows Defender disabled.
The game was really good though. I wish RPG maker games ran well in Virtualbox. They do not.
>I'm thinking about getting a second device only for sensitive stuff, like banking, shopping and managing passwords. It seems a bit of a hassle, but I can't think of any other way.2 of any device is a miserable existence in my opinion. If you really care so much, buy another hard drive/ssd and install it into your computer (but leave it disabled) and boot into it for shopping and banking.
No.3673
are there actual good antivirus tools what are they
No.3681
>>3672>I wish RPG maker games ran well in Virtualbox. They do not.Do Linux virtual machines have better options? Was thinking about finally working up the motivation to rearrange all my shit for a dual boot linux. Bazzite looks cool for a
g a m e r like me
No.3761
>>3664Actually was thinking about this for a while and was wondering what kissu’s actual computer experts think about this one. Like what does Vermin think
No.3763
>>3761keepass is nice, i've gotten used to autofilling credentials with the browser addon and it's pretty handy
i also have the vault in a syncthing folder so i can access it through my phone as well
No.3765
>>3763>keepass>syncthingOh hey wait, that's pretty much my setup as well! And i think it works great. Having keepass so i only need to remember a single good password, and syncthing so that i can access keepass from my phone, or laptop, is a great combination.
No.3768
>>3766It only works as long as the thing you're "securing" is something no one cares about
No.3771
>>3770I keep mine inside Sanae's panties!
No.3772
>>3771anonymous got subsequently hacked now that everyone knew his credentials