« previous next »
Pages: [1]   Go Down

Author Topic: Virus/Security Quiz and Limited User Accounts  (Read 3731 times)

0 Members and 1 Guest are viewing this topic.

Offline Brynn

  • Sr. Member
  • ****
  • Posts: 425
Virus/Security Quiz and Limited User Accounts
« on: November 27, 2005, 05:41:25 PM »
Hey Everyone :),
I was recently referred to this page:
http://www.microsoft.com/athome/security/quiz/virusbasics1.mspx
which contains a very brief quiz, designed to test one's knowledge of internet security.  It's very basic, and probably too simple for most members here.  But if you skip to the results page, at the bottom, there's a link to an advanced version, which some here at LzD might find interesting, if not challenging.

But mostly I only mention the quizzes in passing, to preface my questions.  On the quiz results pages, there are brief discussions of the correct answers, as well as links to more in-depth info, in the form of articles.  One of the questions (I forget which quiz) refers to User Accounts, and the article covers the use of Limited User Accounts as a basic security measure/precaution.  Oh heck, let me just get the url for the article...ok, here we go:  http://www.microsoft.com/athome/security/online/logoff_admin_account.mspx

This is the first I've heard this particular recommendation, and I'm curious what you all think about the use of Limited User Accounts as a basic internet security practice, for the typical home user?  As the article says, it's probably not feasible for those who need to use their admin priviledges frequently.  But for those who can logistically do so without impeding their use of the internet, do you think it's worthwhile?  Would you call it a necessity?  Is it especially powerful  by itself, or is it more like another layer of complexity in one's defense system?  Or both?

Thanks for your time.  Any comments and/or opinions appreciated  :D
Logged
"To sin by silence when they should protest makes cowards of men." - Abraham Lincoln

Offline Jason

  • Sr. Member
  • ****
  • Posts: 321
  • The Onomatopoetic
Re: Virus/Security Quiz and Limited User Accounts
« Reply #1 on: November 27, 2005, 06:41:53 PM »
Hi Brynn! :D

Having a limited user account activated when connected to the internet is an extremely intelligent practise.
It's possible to manage activities that needs a higher priority e.g. if one uses the "Run As" command under the Start-meny.

It's powerful as an extra layer of defense if someone manage to sneak into your computer from the internet.
That someone will be granted the same authorities as the account that your using and therefor a strongly limited account is a smart practise.

In the same time it's important that (at least) the administrator account is protected by a strong password with both capital and noncapital letters, numbers and special signs like for instance !"#¤%&],?[ etc.

Strong passwords are not to hard to remember if you use the first letters/numbers/signs in a sentence that makes sence to yourself.
An example could be: So happy to be the number one Salesman, and for having a 20% raise.
Password: Sh2btNo1S,&4ha20%r

There are specific programs available on the net when someone wants to find out which password is being used, and the time it takes to find it out depends on the complexity of the password, i.e. how many combinations that has to be tested.
A good strong password may take days or even weeks to find out, depending on the equipment that are being used by the offender.

A PC with Windows 2000 or XP without SP2 installed has as a default even an administrator account with a blank password.
How many nano-seconds it takes to take over such a computer, once your inside, is not to hard to guess.

Jason ;)
Logged
In a perfect world, spammers would get caught, go to jail, and share a cell with many men who have enlarged something, taken Viagra and are looking for a new relationship.

Online Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 11542
  • "Stronger than the past, united in our goal."
    • Security Garden
Re: Virus/Security Quiz and Limited User Accounts
« Reply #2 on: November 28, 2005, 04:04:09 PM »
Mitch has easy-to-follow instructions here:  http://members.accessbee.com/mitch/XPsettings.html  .  Just scroll down to "Account Types".  Of course, when you're finished there, go back to the top and see the rest of the document.  I think you're already covered with security programs, but you may want to check Mitch's "Info for Oldies & Newbies" too.
Logged
,  

Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline mitch

  • Hero Member
  • *****
  • Posts: 729
Re: Virus/Security Quiz and Limited User Accounts
« Reply #3 on: November 28, 2005, 04:35:37 PM »
i agree with the strong admin password and suggest that you make a password rescue disk !

http://members.accessbee.com/mitch/small_documents/XPRecoveryDisk.html

and keep it in a secure area !!!!!!!!!

(note: from the "phantom finds" area of my site ;-)
Logged

Offline Brynn

  • Sr. Member
  • ****
  • Posts: 425
Re: Virus/Security Quiz and Limited User Accounts
« Reply #4 on: November 28, 2005, 10:08:06 PM »
Hey, thanks everyone!
And this is something I actually vaguely understand, for a change :D
Although don't be too surprised if I have to post for help ;)

So, now, I would have thought, since I'm the only user my computer will probably ever have, why bother with an admin password.  But the whole concept here, is that should I lose control of it, to what- or whoever, the complicated password would further delay, or hopely prevent them from being able to do anything.  Correct?
So maybe I should set an admin password right away, while I work through the instructions for the Limited Account...?

Thanks again, Jason, Mitch and Corrine :)
Logged
"To sin by silence when they should protest makes cowards of men." - Abraham Lincoln

Online Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 11542
  • "Stronger than the past, united in our goal."
    • Security Garden
Re: Virus/Security Quiz and Limited User Accounts
« Reply #5 on: November 28, 2005, 11:18:02 PM »
Off topic a bit, but while speaking of passwords, how many people use the same password for their email, banking, forum memberhips, etc.?  I hope no one does.  Using something along the lines of Jason's tip, I use a different password for each forum that I belong to (and that is quite a few!).  Of course I use a stronger passy for online bank access and a different one for email.  Hey, ya never know.
Logged
,  

Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline Jason

  • Sr. Member
  • ****
  • Posts: 321
  • The Onomatopoetic
Re: Virus/Security Quiz and Limited User Accounts
« Reply #6 on: November 29, 2005, 06:17:24 PM »
Quote from: Brynn on November 28, 2005, 10:08:06 PM
So, now, I would have thought, since I'm the only user my computer will probably ever have, why bother with an admin password.  But the whole concept here, is that should I lose control of it, to what- or whoever, the complicated password would further delay, or hopely prevent them from being able to do anything.  Correct?

YES that's the idea, and even if someone should get inside through your layer of protections and lurk around to check out the contents in your computer they can't do much harm with a limited account.
The longer time it takes to crack your password the larger your own timeframe will be to find out if something fishy is going on and disconnect your computer from the internet.
I hope nobody will get paranoid over the examples or advices given cause an intrusion isn't something life threatening, but with more knowledge like i.e. from mitch's website it's easier to understand what can happen on the internet and to create levels of security that fits ones own needs.

Jason ;)
Logged
In a perfect world, spammers would get caught, go to jail, and share a cell with many men who have enlarged something, taken Viagra and are looking for a new relationship.

Offline Brynn

  • Sr. Member
  • ****
  • Posts: 425
Re: Virus/Security Quiz and Limited User Accounts
« Reply #7 on: November 30, 2005, 04:45:42 AM »
Oh geez!  A friend of mine, with whom I'm trying to build a website, uses the same username and password for EVERYthing.  And it's such a simple password, I'm surprised she hasn't been attacked yet.  I'm just glad that all the admin powers for the "site" are under my email address and password!

Thanks again, everyone.
Logged
"To sin by silence when they should protest makes cowards of men." - Abraham Lincoln

Offline GR@PH;<'S

  • Administrator
  • Hero Member
  • *****
  • Posts: 15651
    • http://www.taktmobiles.co.uk
Re: Virus/Security Quiz and Limited User Accounts
« Reply #8 on: November 30, 2005, 12:45:23 PM »
Brynn,
Quote
A friend of mine, with whom I'm trying to build a website, uses the same username and password for EVERYthing.  And it's such a simple password, I'm surprised she hasn't been attacked yet.
you could always tell your friend that she may interested in looking into  password manager like  Roboform (yopu can use it FREE to hold up to 10 passwords)
Quote
Roboform is the top-rated Password Manager and Web Form Filler that completely automates password entering and form filling

GR@PH;<'S   :breakkie:
Logged
press Enter then have a Brandy then if the problem is still there have another Brandy
Q: does it work
A: It does seem to for a few hours at least.

Offline SpyDie

  • The Spyware Cooker
  • Administrator
  • Hero Member
  • *****
  • Posts: 2045
    • The LandzDown Forum
Re: Virus/Security Quiz and Limited User Accounts
« Reply #9 on: November 30, 2005, 04:44:13 PM »
I use all different passwords but I am surprised I remember them all.
Logged
Beta. Software undergoes beta testing shortly before it's released. Beta is Latin for 'still doesn't work.'

Online Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 11542
  • "Stronger than the past, united in our goal."
    • Security Garden
Re: Virus/Security Quiz and Limited User Accounts
« Reply #10 on: November 30, 2005, 05:03:29 PM »
I'm not.  You are the Jedi Master.  :rose:
Logged
,  

Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline Eric the Red

  • ISO/IEC 27001:2005
  • Administrator
  • Hero Member
  • *****
  • Posts: 1611
  • Would somebody please pass me a beer!
Re: Virus/Security Quiz and Limited User Accounts
« Reply #11 on: December 02, 2005, 11:18:33 PM »
At work I regularly undertake the auditing of passwords using commercial and freeware password "recovery" tools (please don't ask me to name them, I am not in the business of defeating security measures) and over the years two factors have become startingly apparent:

  • The time taken to "brute force" passwords has dropped alarmingly with the increase in processor power
  • My users will continue to defy policy and use dictionary based passwords like "rover" and "man_united" if they think that they can get away with it

As a result we have instituted smartcard (two factor) authentication for logging on to the corporate network but I fear for their safety when the users are doing their online banking from their home machines, there is a wealth of information available on how to construct a secure password - in addition to mitch's opus work sites such as http://its.med.yale.edu/security/pswd.html are easy to read and understand - and they should be compulsory reading for anybody who connects a machine to the 'net.  :breakkie:
Logged
"The time to start running is around about the "e" in "Hey, you!" "
Proud member Since 2004 

The information I provide is provided "AS IS" without warranty, and confers no rights.
Pages: [1]   Go Up
« previous next »