depends on what you trying to achieve opera default safe but dont support plugins which is good as well as bad let take kaspersky internet security example if you go to site which contain trojan script opera will bypass it to your system without making your anti-virus scanning it on web page as it dont support your kis plugin so if you use ie or firefox is support plugin but than there are more chances of getting infected by wrong plugin and active-x ....etc now what i usually do on my windows is that i run firefox in limited user account and inside sandboxie environment and behind the proxy for general surfing and opera/ie as to connect those sites only which i trust fully and for online banking keep your system clean temp......etc dont download any miscellaneous software/free online movies games....etc dont fo to underground sites.....etc learn many safe surfer basics and online banking basics like password length and how strong your password above all checking the certification of you bank site and check it if its real or phising one....if you login in wrong site and put your username/password ........gameover so there are many parameters ....etc no matter how much secure browser you use if you got trojan/rootkit or keyloger your game is over and above all choose bank which support online banking theft many banks refund your money if anything happen via online banking best and safe is your own knowledge and using of it that all the safety
Is this as easy as using the browser(FF in my case) and clicking on "view page info" and making sure that it's legit or is there some other way to make sure that I'm at the correct site. I mean, I have the few banks I deal with bookmarked and use those everytime but other than checking to make sure it's "https" I don't do anything else. Also, I have Shadow Defender, would that be the same as running the sandbox? I feel rather stupid asking that, but want to be sure even if I am stupid. lol
I liked Chrome but didn't like the "everybody's business is our business" attitude of Google. Now I run Comodo Dragon. I have one icon set up to run in "incognito" mode when I start it up. I haven't seen anything better.
3 basic things atleast you can do there is nothing 100% safe but 1st you can check the certificate of site when you click on details it show that its valid for VeriSign SSL Certificates or some reported site certificate 2nd use opera or one browser only for save site login only not for every day use 3rd for banking best thing can be done is write a ip address of bank site rather that typing by domain name very less chances you get by phishing site or if you cant do that set your one browser to connect to only sites you wanted to and use only for that purpose only 4th while going to bank sites check your firewall link which sites its connecting set it to connect only at limited sites required by bank only use tools like ccleaner before and after surfing the bank sites the firewall like online armor give you online banking mode which what does is disconnect all other network traffic and make firewall run under limited usermode and to limited site same can be achieved by setting anyfirewall with any one browser 5th use online banking to check your balance not for online banking transaction or limited online transaction many banks provide that as well there are many things no end to them some people use live linux cd for online banking as well so there are many and many different ways as well no one 100% if you are that level security paranoid 2 things 1st buy one more netbook or laptop just to check your mails etc 2nd never use online banking or atm only go and bring money by yourself using cheque book like i do most of the time ***warning internet is hazard to health it might give you nightmares of 12-13 years old kid peeping into your computer and watching your video files so use it at your own risk*****
Thanks,Mack. I will definitely do some of those suggestions. One question more, say I go into Shadow mode with Shadow Defender and I have a problem(like phishing or whatnot), while my computer could be safe, that wouldn't do anything for the information I had sent, right? I guess my main question is just how would being in Shadow Defender help me in Online banking. Once again, sorry for the novice questions.
Maybe we should give voice to Expert? Interview with Charlie Miller: http://www.oneitsecurity.it/01/03/2010/interview-with-charlie-miller-pwn2own/
Nice read, Prorok. I'm just way out of my depth here. I want to make sure, if I run the 64 bit IE 8, then flash wouldn't be installed by definition. I mean, 64 bit IE wouldn't be able to run it even if installed, right since right now there is no 64 bit version of flash? So, next dumb question, if I DO have flash installed and use it on my other browsers, would that make a difference on the 64 bit IE8? Is there still some way a hacker could get into my computer through the 64 bit IE8 just because I do have flash on my computer?
The most secure browser is ANY browser, run in conjunction with DefenseWall or GesWall or Sandboxie or Shadow Defender.
one more thing please make your bios password protected as well because if you got bios level rootkit/virus antivirus didnt get it even it did cannot remove it keep coming back even after format everything http://www.wikihow.com/Remove-a-Boot-Sector-Virus you have to go through long process of clean it via flush bios so better make your pc bios protected
well i dont use shadow defender so wont comment much its look like a sandbox say making your entire pc run in virtual environment but going to phishing site it save you for getting infected by virus but if you put your legal data there i mean username/password how it can be saved from phishing attack phishing also include wrong site i mean fake site clone of real one so when you put your information on wrong site rather than the original one most people make fake sites of banking but its hard to make copy of ssl certificate so check them as well write ip address of your bank site when you login check from firewall its ip address firewall like outpost give you that option many others as well or you can do is from dos run netstat -n -a check which sites you are connected if you are not behind proxy server http://en.wikipedia.org/wiki/Phishing http://www.howstuffworks.com/phishing.htm
I agree with the other posters who recommend using a sandboxed browser for general web browsing. The you can use your favourite browser without having to worry about vunerabilities in the browser or in Flash etc. A good choice for online banking is to try Prevx SafeOnline with an unsandboxed browser. SafeOnline protects the browser process and your login credentials from any malware (keyloggers etc) that might be on your PC and will prevent you from entering them by mistake in a spoofed website. The free version allows you to protect one website.
IMO, Chrome is probably the most secure standalone but I find it rather unstable once I start throwing extensions in. Sandboxie + Firefox + WoT is my combination of choice for browser security.
Dont use IE, use either Firefox or Flock. I came to know that some fake websites of banks exist.They are the exact duplicate of the original website of the bank. Just make sure that banking websites begin with https (secure) and not http.
I didn't notice if anyone has posted this link or not, so if you're interested take a look at it. http://nsslabs.com/browser-security Regards
Another interesting new article... http://www.infosecurity-us.com/view/7838/battle-of-the-internet-browsers/
well, actually id safe IE8 x64 version is by far the safest. and when you run Prevx's SafeOnline on that aswell, its untouchable!!
1. Get a live linux cd from a valid source and create the disc. 2. Disable your wireless network 3a. Turn off all the other PCs on your lan. 3b. Turn off the router. Wait some minutes and turn it on again ( valid only for those who have dynamic ip and the ip changes often or after every reconnection). 4. Connect one pc to your router via ethernet cable. 5. Stay alone in the room. 6. Run the linux cd. Insert it in the optical drive and reboot. 7. Open firefox and type your bank's web address. Control it again...and again. 8. Check if your bank uses secure connection. If not don't use their online services. 9. Proceed with the transaction or any other online banking operation. 10. Close your browser. 11. Reboot the pc without the linux live cd. 12. Turn off the router. Wait some minutes and turn it on again ( valid only for those who have dynamic ip and this changes often or after every reconnection).
