If you see this message, either your browser doesn't support CSS (Cascading Style Sheets)
it's disabled in your browser, or it isn't accessible to, got messed up by or wasn't cached by a web service such as Google's cache view.
To enable CSS in your browser, if it supports CSS, check your help file or your browser's
online support forums. Want a CSS-supporting browser? Get Firefox, a secure alternative to the unsafe and unsecure Internet Explorer browser.
Because there's more to life than one's self, status or material things.
(for those dealing with real-life issues and who enjoy participating in stimulating discussions on issues and ideas, crave the thrill of geographic, mental and spiritual exploration and discovery and value local and global community, belonging and old and new friendships)
Sold, recycled, donated and discarded computers, PDAs and cell phones can contain recoverable private data even after a delete, format or reset. How to securely erase your data.
Was Jesus just a man who married Mary Magdalene? Has the church been hiding information from us for years about Jesus? Don't decide too quickly. Examine the evidence first.
Think conclusive cases can't be made for the Bible and Jesus as the God/Man Messiah? You'd be surprised. The overwhelming mountain of factual, historical evidence is too compelling, too convincing to be ignored.
''We are living in very interesting times. Too many people are confused about what the Bible says about the future, and a lot of that has to do with confusion about Israel.'' Learn more.
If an angel or a loved one who has died appears or speaks to you, don't automatically assume it's a good angel or your loved one. Here's why.
Don't automatically assume the growing fascination with Harry Potter, witches, wicca and the occult is harmless either. Explore these controversial topics.
Don't automatically assume that New Age / New Spirituality concepts and the alternative / holistic therapies and media influenced by them are harmless. Learn more.
Still using...
...Windows 95, 98, Me, or XP Home?
...Windows 2000, XP MCE, XP Pro, Mac OS X or GNU/Linux as is?
...Internet Explorer?
...Outlook Express?
...a single, FAT16 or FAT32 hard drive partition?
...your default account?
...your wireless network as is?
...your cell phone or PDA as is?
...public computers and hotspots while unaware of the risks and how to prevent them?
Still think using a firewall, antivirus and antispyware software, maybe an alternative open source browser and e-mail program, and even keeping them and your operating system up-to-date, is all you need to do, to keep your computer secure and your private data private?
Or that using them constitutes basic security protection from online threats? (the folks that did the AOL/Cyber Security Alliance and AOL/NCSA online safety studies keep getting this one wrong.
By doing so, did you know you're making your private data available to strangers, and allowing crackers (mistakenly called hackers) and wardrivers to turn your computer into a ''zombie'' and use it and your wireless network, if you have and use one, to break into vital business and government computer systems? If this concerns you - it should, read on.
If you use the Windows operating system, know that it's very unsecure if used as is. And even if you use Mac OS or GNU/Linux (unless you use a secure distribution), it isn't sufficiently secure as is.
Computers will never be 100% secure, but if you want to make yours sufficiently secure, which will help make the Internet more secure in the process, I strongly recommend completing the following nine steps.
WARNING: Vulnerability-testing software and services can't be trusted to find all of your computer, firewall and network's critical vulnerabilities. Nor can they be trusted to not collect and use the private data they find on your hard drive.
"My personal experience is that I don't trust them to do a complete job, and I know that a lot of unknowing users on the Internet trust these online scanners to give them that "nice, warm, fuzzy feeling" about security. Big mistake, as complacency makes you drop your guard. Besides, who knows what sorts of data these scanners collect on the back end." - Jason
Disclaimer: If in spite of this you still want to use the following vulnerability testers, you do so at your and your private data's own risk.
Test your computer for vulnerabilities with these security scanners.
PLEASE Note: The following steps are hidden from sighted visitors and keyword searches with Javascript. If you prefer viewing them without having to click on the links to show them, or want to do a keyword search, or print this page, either disable Javascript in your browser, or view the steps without Javascript.
Want a system that lets you try out software on your desktop or laptop computer and surf the Web without having to worry about it getting infected with malware, or about that malware stealing private data stored on your hard drive?
One that completely removes malware, if it does get infected, simply by rebooting or restarting? One that lets your kid(s) or a nonsavvy computer user change, delete or mess it up, only to make itself new again on reboot?
Or one that lets Windows and an alternative operating system coexist without having to install them on separate partitions or hard drives?
Then I invite you to keep an open mind to the possibilities of an old and proven, and now more widely used, security method.
The method of scanning your hard drive for malware after it has infected your system, which requires constant updates, has been made obsolete by the overwhelming and ever-increasing number and types of malware which have been created to exploit or take advantage of security holes or vulnerabilities in operating systems and software.
That method is now being replaced in more and more schools, libraries, kiosks and Internet cafes with one used for years by programmers that prevents malware from installing, running, or making changes to your real operating system by operating in a virtual operating system or ''virtual machine'' from a real one protected by a host intrusion detection and prevention system or systems (HIDS and HIPS).
Note: You can run Darwin (a free version of Mac OS), BSD or GNU/Linux in a virtual OS from Windows. But since alternative operating systems are more stable and secure than Windows, I recommend doing the opposite: run Windows in a virtual OS from an alternative operating system.
How to Set Up a Sufficiently Secure Virtual Operating Systemskip
ATTENTION: If you want to avoid leaving private data entered for online purchases (usernames, passwords, names, phone numbers, addresses and credit card numbers) on your hard drive or removable medium after forgetting to reboot your virtual OS or securely erase the data, I strongly recommend doing the following two things: skip
Encrypt the virtual operating system's (or virtual machine's) image with TrueCrypt (free) and for additional security, store it on a removable medium. skip
How to Encrypt a Virtual Machine with TrueCrypt (skip the part about creating a virtual machine image if you already have one or want to use one of the ones I've linked to later in this setup)
Complete step 7, including storing your private data on an encrypted USB key or token (a secure thumb drive) and your passwords in one of the following secure login and form fillers that protect against key loggers. Then follow the steps below to set up and maintain a private and secure virtual OS.
If you have Mac OS, the Safari browser ''protects your personal information on shared or public Macs when surfing the Web. Go ahead and check your bank account and .Mac email at the library or shop for birthday presents on the family Mac.
Using Safari's new Private Browsing feature, no information about where you visit on the Web, personal information you enter or pages you visit are saved or cached. It's as if you were never there.'' - Apple Computer, Inc.
If you've been saving private data on your hard drive, especially in unencrypted form, or the previous owner did, if there was one, securely erase your whole hard drive. Otherwise, skip this step.
If you prefer saving your private data on your hard drive instead of on removable media (not recommended), create separate partitions for your operating system and personal files (for Windows, create NTFS partitions - they're more secure than FAT16 or FAT32).
Because a newly-installed Windows system can become infected and corrupted by malware within only a few minutes of going online, especially with a broadband connection because your IP number never changes, I strongly recommend downloading all of the following software you choose to use first and saving them on a removable medium, before installing Windows.
Make sure you include the lastest drivers for your hardware. (drivers are usually located in the support section of each company's web site - if not, check driverguide.com)
Do a clean installation of Windows XP Pro, Windows Vista or an alternative operating system. (a virtual operating system won't work without a real, host operating system)
I recommend WindizUpdate for Windows users, instead of Microsoft's WindowsUpdate service, because unneeded updates can corrupt or disable Windows, and unlike WindowsUpdate, WindizUpdate only lists updates for software and services on your system.
Virtualization software, combined with behavior and whitelist HIPS, antirootkit software and operating system updates, will help reduce your computer's vulnerability to threats to about 1 tenth of 1 percent*.
Because of that and a virtual machine's ability to return a system to its original, healthy state, it also makes antimalware software pretty much unnecessary. But if you still prefer being extra safe, install the following software, scan often and install updates when available. skip
To be safe, I recommend using the following antirootkit software as well to check for rootkits which may have bypassed your HIPS or HIDS program.
WARNING: Removing a rootkit may corrupt and disable your operating system, and destroy personal data in the process. I strongly recommend reformatting and reinstalling Windows instead, if you want to keep using Windows. Otherwise, you might want to consider taking this opportunity to switch to an alternative and more secure operating system.
Install one of the following virtualization (CPU speed) or emulation (slow or very slow) software combinations: skip
WARNING: Installing software and working in your virtual OS for long periods of time without running a HIPS and / or HIDS could, if your virtual OS were infected, infect others' computers and you could lose private data to identity thieves, predators and others interested in your private data. I strongly recommend running a HIPS and a HIDS on either your host operating system, your virtual OS, or both.
Run Windows, GNU/Linux or BSD on an Intel-based Mac with Parallels Desktop for Mac, a virtualization software program, or hypervisor, similar to the Virtual PC for Mac emulator, except that it runs at native, or CPU, speed.
Mike Healan, long time spyware / antispyware guru, in his newsletter said ''It is now my official position that using the [VMware Player and] Browser Appliance is the best and only way for Windows users to remain completely safe on the Internet.'' And in his Browser Appliance article (see below), he said ''it offers 99.9% protection from all spyware.''
In ''The Best Way for Windows Users to Be Safe on the Internet'' Suzi Turner, spyware researcher and consultant, of SpywareWarrior.com, agreed with Mike: ''I previously blogged about the top 10 ways to stay free of spyware. It seems I left out two important tips, one being to use the VMware Player and Browser Appliance...''
Ian ''Gizmo'' Richards, computer professional and author of Tech Support Alert, also feels it's the best option, and has written an article in his newsletter on ''How to Surf with Complete Security [with VMWare].''
Pre-built GNU/Linux Virtual Machines (You're told to use the very slow QEMU emulator with the machines, what they call Free OS images, but I recommend using the VMware Player virtualization software instead, which is near CPU speed.)
Portable Privacy Machine is a complete, virtual GNU/Linux machine that uses the QEMU emulator to run GNU/Linux either in a window or full-screen on a Windows system from a USB drive. It contains privacy-enabled open source (free) Internet applications.
No installation is needed. Just plug the USB drive into any Windows or Linux computer, and click on the Virtual Privacy Machine icon and you're ready to go. When you're done, take your Internet applications, email, bookmarks, history, web cookies, download files with you in a persistent home directory on your USB drive.
It runs on any rewriteable media (USB drives, Flash Memory cards, Secure Digital devices, iPods, etc.) This PR1 release runs on Windows and Linux. The final release version will also run on OS X. And it has Enigmail plugins for PGP email encryption.
I recommend running Bastille, to harden or secure Portable Privacy Machine.
WARNING: The following DSL Embedded page contains a 4-letter word you may find offensive. If you have a content filter, it may block the page unless you temporarily allow the word, which starts with a ''D.''
DSL Embedded is a free GNU/Linux that you can run in Windows. It's based on the slow QEMU emulator, but by installing the KQEMU accelerator, it'll run near CPU speed.
I recommend using a HIPS with a white list too, in Windows. And if it's possible - I don't know if it is - and you know how, you might want to also secure DSL Embedded with Bastille.
Note: QEMU acceleration in Windows is currently in the experimental stage, takes several steps to install, and needs to be manually enabled every time you use DSL Embedded.
Install the latest QemuInstall executable (exe) file.
Overwrite the qemu.exe file that's included in DSL Embedded, with the one that you've just installed. (You can now safely unistall Qemu 0.7.2, if you wish.)
Download the latest kqemu tar.gz file and extract it with one of these file archive compactors / extractors:
Right-click kqemu.inf and choose Install. (you only need two files: kqemu.inf and the driver - the others are only required if compiling from source)
Click Start, select Run and enter cmd (or click Start, select Programs, Accessories, then Command Prompt), to open the command prompt, then type net start kqemu. (Note: QEMU acceleration is disabled by default, so you'll have to do this step every time before using DSL Embedded.)
Double-click the dsl-windows.bat file in the dsl-embedded folder to start DSL Embedded.
Windows is crashing or freezing so much that it's giving you fits, making you want to pull your hair out, and you're ready for a change;
you don't want to have to spend money on an upgrade, or can't afford to buy one;
you want to save yourself a lot of money over the years that you'd be spending on great software, and like the idea of getting them for free instead;
you want to save yourself a lot of headaches and valuable time you'd be spending over the years continually ridding your system of invaders and working hard to prevent new threats;
you're tired of your system always slowing down due to bloat and fragmentation, and of having to keep optimizing it by frequently deleting or securely wiping or erasing temporary files and restore points and defragmenting your hard drive to get your system up to speed again, removing viruses and keeping your deleted private data from being recovered; or
you're just curious to see what the other popular operating systems are like,
...switch to GNU/Linux, or maybe better yet, Mac OS X (the FreeBSD code it's based on has been carefully reviewed by 20 experts over the years, instead of just one with GNU/Linux) and follow the guidelines in step 5 to secure it.
If you're an experienced GNU/Linux or Unix user, switch to FreeBSD or NetBSD and secure it, or if you're really serious about security, switch to OpenBSD, considered by many security experts to be the most secure operating system, due to continuous and thorough security audits of its code. skip
Don't like Windows' security and privacy issues and would like to switch to a more secure operating system, but keep using Windows because there aren't any alternatives to your favorite Windows-based games or office software, or you don't like the ones that are available?
Let Windows and an alternative operating system coexist on your computer's hard drive(s) with one of the following options. Then use Windows to play your games and / or use your office software, and an alternative operating system when online (strongly recommended).
Ways to let two or more operating systems coexist on your computer: skip
DON'T use Windows 95, 98, Me or even XP Home. Use one of the following versions of Windows instead. They can be made sufficiently secure, but the other versions can't. And if that's not bad enough, Microsoft no longer provides security updates for Windows 98 and Me (95: since December 30, 2001 - 98 and Me: since July 11, 2006). Read the following articles to learn more.
Windows 2000 with Service Pack
Windows XP Professional
Windows XP Tablet PC Edition (XP Professional plus writable screen technology)
Windows XP Media Center Edition (XP Professional minus a few features - not XP Home - with personal / digital video recording features, known as PVR, DVR, etc.)
Note: There's a catch for using Windows XP Pro and XP MCE (Media Center Edition). Upgrading to XP Pro will most likely require getting a year 2000 or newer computer, if you don't have one already.
And upgrading to the retail version of XP MCE requires buying a Media Center PC. It can't be bought separately. But if you don't need Microsoft's support or the XP MCE manual, and don't want to buy a new computer, you can buy the OEM version of XP MCE by itself.
ATTENTION: Some CPUs (chips) now have a new security technology AMD calls NX (No eXecute) bit or Enhanced Virus Protection (EVP) and Intel calls Execute Disable Bit or XD Bit. It prevents viruses, trojans and worms that take advantage of buffer overflow from doing their malicious deeds and damaging your system.
CPUs That Have NX or XD Bit:
Intel Pentium 4 3X1, 3X6, 5X1, 5X6, 6XX (including 3.73GHz Extreme Edition), 8XX (all 3X1 to 8XX chips have 32-bit and 64-bit support through EM64T - Extended Memory 64-bit Technology), 3XXJ, 5XXJ and 7XXJ
Intel Pentium M 730, 740, 750, 760 and 770 (have 32-bit support)
Intel 64-bit Xeon (have 32-bit and 64-bit support through EM64T)
Intel Itanium and Itanium 2 (both have 32-bit - only efficient if it has IA-32 Execution Layer or IA32EL - and 64-bit support)
All Future Intel CPUs
AMD Athlon 64 and Athlon 64 FX (both have 32-bit and 64-bit support)
AMD Opteron Single-core (90 nm version) and Dual-core for Socket 939 / Socket 940 (both have 32-bit and 64-bit support)
All Future AMD CPUs
Transmeta Efficeon
The latest versions of Windows, GNU/Linux, Mac OS and BSD now have a security feature that supports NX bit. It's called either Data Execution Prevention (DEP) in Windows Vista and Windows XP with Service Pack 2 (SP2); No eXecute or NX in GNU/Linux, Mac OS and NetBSD; Exec Shield in Red Hat Linux; W^X in OpenBSD or PaX in GNU/Linux for chips that don't have NX bit).
For Windows Users: Unless you already have a computer with a CPU that has NX bit, if you want to take advantage of the protection that it provides, and be able to continue using your 32-bit Windows operating system and software, you'll need to either:
upgrade your computer's CPU, or main chip, and BIOS if your computer's motherboard allows for it
upgrade your motherboard and CPU if it doesn't, or
buy a new computer that has a CPU with NX or XD bit.
WARNING: If you buy a computer with a chip other than one that has NX bit to support Vista's or SP2's DEP technology, you won't be protected from some of the most damaging viruses, trojans and worms that are aimed at Windows and its related software programs.
Here are some articles about the new technology and the chips that support it: skip
If your computer's motherboard allows for one of the new chips that support SP2's DEP technology, or you already have one, here are some helpful Windows XP buying guides and resource sites:
If your computer's motherboard doesn't allow for one of the new chips that support SP2's DEP technology, and you'd rather buy a new computer than a new motherboard and CPU, here are some helpful computer buying guides:
ATTENTION: Once you've ordered or downloaded one of the following operating systems, see step 2, File System and Partitions, to learn how to prepare your hard drive for a single, dual or multi-boot system, in other words, a computer with one or more operating systems installed. Then follow steps 4 through 8 to keep your data sufficiently secure and private.
FreeBSD, NetBSD and OpenBSD (recommended for experienced GNU/Linux and Unix users only) skip
Hush Mini-ITX PCs (completely silent - Caution: usually only the AMD 64 CPUs have DEP, which, combined with Windows Vista or Service Pack 2 for Windows XP, provides protection from certain viruses, but some suppliers' Hush PCs may not have DEP)
Then check out the following easy-to-try out, install and use GNU/Linux distributions.
Question: What are the security risks with using a GNU/Linux live CD?
Answer: If a GNU/Linux Live CD is on a CD-R (not rewritable - write once, then read-only), malware (including spyware) and adware will be unable to install themselves on your system, making them unable to:
steal your money, identity or other private data* or
use your computer to send spam or break into other computer systems.
(*That's why some banks have given them to their customers to do their online banking with.)
Warning: A GNU/Linux Live CD on a read-only CD-R can't protect you from hardware key loggers, ''recording devices that could be physically installed on your computer's motherboard, inside its box or keyboard, or remote monitoring of your computer activity thru its radio-frequency emissions, such as 'Tempest' attacks.'' - Information on Knoppix-MiB Live CD
Here are some GNU/Linux Live CDs and distributions for USB drives and other removable media that keep your private data secure and private: skip
Anonym.OS Live CD (575 MB) - OpenBSD with Tor - has tools for anonymizing and encrypting connections.
Knoppix-MiB Live CD - This version of Knoppix allows you to store your personal files (home directory) on removable media, such as a ''USB FlashDrive'' or an IOMEGA ZIP disk in encrypted form with AES, currently the strongest encryption.
All the data written to your hard drive, including the swap file, is automatically encrypted using AES and a randomly generated session key. It includes the Postfix mail server software (SMTP MTA) and automatically encrypts the e-mail you send using TLS, provided your recipient's e-mail server is also able to use this protocol.
Note: ''Most [GNU/Linux Live CDs] have now refined methods of saving changes to a USB memory stick, or a hard disk partition, or a floppy disk, then at boot a command is passed to tell the computer where to find these saved settings.'' - Puppy Linux skip
Desktop OnTheGo - an evolutionary application that allows users to save their home directory to a USB drive in MEPIS - features optional AES encryption to keep your files safe from prying eyes.
Here are the easiest GNU/Linux distributions (versions) to use, listed in descending order of included applications and helpful, useful configuration. skip
Note: I believe SimplyMEPIS has the best configuration and selection of included software, but some think Linspire is the most user-friendly for new Linux users, while others think Kubuntu or SUSE is.
Freespire (now available! Linspire's official, free version with only open source software)
Make Your Own Install CD for Ubuntu (not recommended for new Linux users - includes GNOME interface - awarded best GNU/Linux distribution of 2005 by PC World and recently named best distro at the LinuxWorld Expo in London)
EasyUbuntu (install the most commonly requested apps, codecs, and tweaks not found in Ubuntu, all with a few clicks of your mouse)
Note: ''MEPISLite is a lightweight version of SimplyMEPIS optimized for 'modest hardware.' To run gently on older machines, MEPISLite includes skinnier packages [software programs] and a number of tweaks to minimize 'disk thrashing.' It has been used successfully with as little as a 2 GB hard drive and a Pentium 2 processor with 128MB of RAM. MEPISLite preinstalls a full complement of software including KOffice, Kontact, and Firefox.'' - mepis.org
If you need information about your hardware before installing GNU/Linux for the first time on a Windows PC, run Belarc Advisor (free) or Sandra Lite (free) and print out the results.
Note: To install SimplyMEPIS on your hard drive, boot up the SimplyMEPIS CD, enter root as both the username and the password, and log in. Then click on the Install SimplyMEPIS icon on your desktop.
Note: The following GNU/Linux distributions require a membership to download software programs which you can download for free with SimplyMEPIS.
CAUTION: You can also download them for free with the following GNU/Linux distributions, but they probably won't work, since these distributions have tweaked the GNU/Linux distributions they and the software programs are based on (Debian and Corel Linux).
WARNING: 1)Xandros Open Circulation Edition does not come with a firewall installed. You may either download the Firestarter firewall from Xandros Networks (membership required, but the firewall is configured for Xandros) or download Firestarter or Guarddog for free. Then enable it. (These free firewalls may or may not work in Xandros). 2)The firewall in the Standard, Deluxe and Business editions may not be enabled by default. To enable it, open the Personal Firewall Wizard. It's in the Internet section of the programs menu.
If you need information about your hardware before installing GNU/Linux for the first time on a Windows PC, run Belarc Advisor (free) or Sandra Lite (free) and print out the results.
Note: Members of Linux User Groups or LUGs get to use 45% discount coupons when buying Xandros. So if you aren't a member yet of your local LUG, now you have a good reason to join! Find a Linux User Group in your area. List 1 | List 2 ((check both lists! each list shows groups not found on the other list)
(a commercial distro based on Debian - includes a firewall enabled by default)
WARNING: In Linspire, going online in your default account is unsecure. See step 4 for instructions on how to create a (limited) user account in Linspire. skip
Freespire (now available! Linspire's official, free distro in two versions: Freespire (version number) has proprietary software - Freespire OSS Edition includes only open-source components.)
If you need information about your hardware before installing GNU/Linux for the first time on a Windows PC, run Belarc Advisor (free) or Sandra Lite (free) and print out the results.
Want to check out Linspire without installing it on your hard drive? Get LinspireLive.
PLEASE Note: You can't install LinspireLive on your hard drive. It doesn't have an installer. However, if you know what you're doing, you can install software programs and save files on your hard drive. Aside from that, it's a fully functional operating system. skip
(Keep in mind that you can't install LinspireLive on your hard drive.)
Want to install Linspire on your hard drive?
If you have a broadband connection, you can download Linspire for free or at a discount if you know the current coupon code. Linspire makes one available once in a while, but you can only find it on certain web sites. Do a search for ''linspire coupon code'' to find it.
(To get it for free or at a discount, enter the current coupon code, if there is one, and click Apply Coupon.)
(To get it for free or at a discount, enter the current coupon code, if there is one, and click Apply Coupon. Note: The coupon is sometimes only valid with the single CD, not with the bundles.)
(a commercial distro based on Corel Linux, which is based on Caldera)
I had Lycoris Desktop/LX listed here, but it's now owned by Mandriva, who have merged Desktop/LX, Mandrake Linux and Conectiva Linux into Mandriva Linux Discovery, PowerPack and PowerPack+.
If you need information about your hardware before installing GNU/Linux for the first time on a Windows PC, run Belarc Advisor (free) or Sandra Lite (f