Mistrust of another person's computer

[K. Eng]

I've never liked using other people's computers to check my personal email or do anything requiring me to use a login and password. I am shocked at how many people (1) always run in an admin account (2) don't run updates on their antivirus and OS (3) install or allow to be installed, all sorts of weird windows tray programs. I don't like using my work computer for this stuff either because I'm not the only one with access to the system.

I am paranoid that some spyware will steal my info and pass it to criminals.

But what happens if my computer gets destroyed (say, it gets smashed in a tornado while I am at work), and I need to access my email or financial institution's website?

I was thinking about buying a really cheap notebook ($200-300), locking it down (BIOS and Windows passwords, maybe HDD too), and leaving it with relatives. This way, I know I would have a secure system to access if this one becomes disabled. The only problem would be software and antivirus updates.

[GomJabbar]

I feel much the same way.

I have been toying with the idea to bring my old 600E to work with me as a backup computer. I do have access to the work computer, but like you say, you really don't know how safe it is.

As far as antivirus goes, you can always install AVG free edition. Should be good enough. If you are really paranoid, you could download the Microsoft updates to a CD and have it ready if you need it.

[wearetheborg]

Even better, install linux on the second computer

[jamerslong]

i use a Pendrive with puppy linux and take it with me, they have a version with a windows Emulator as well. it dosent require installation on it and is secure, no data is on their drive what so ever.


you can pick up a pen drive for 10$

[The Spirit of X21]

You know, it's never crossed my mind, although when I use other computers the users are enthusiasts like me who care a great deal about what's running on their machines. Additionally, at work virus/spyware scans are continually run to keep the boxes clean.

[Robbyrobot]

I am paranoid that some spyware will steal my info and pass it to criminals.

Compared to many people, I'm paranoid too... but not quite as much as this. I have quite a number of computers and if worst comes to worst, could set something up to continue working if my main machine were to somehow "blow" - although anything except a massive HDD failure wouldn't cause any major problems. I've replaced more than one mainboard in my time.

As for other people's computers, I've never "used" them except to clean them up (remove unused junk and playpretties, install antivirus and anti-spyware programs and scan the system), and certainly wouldn't do anything like logging into an email account without doing that beforehand. Afterwards, I'd feel no more danger than on my own system.

Incidentally, I keep all my passwords on a separate USB memory stick which I only insert when I need a password. That's "paranoid" for me.

The Internet is a dangerous place for people with little knowledge or caution, but with reasonable precautions there's no need to fear it. And the biggest security risk always sits behind the keyboard...

[GomJabbar]

i use a Pendrive with puppy linux and take it with me, they have a version with a windows Emulator as well. it dosent require installation on it and is secure, no data is on their drive what so ever.

I am not familiar with puppy linux; are you booting up your pen drive? If so, how do you deal with wireless network adapter drivers? If you are simply running software from the pen drive while the computer it is plugged into is booted into Windows, then how are any passwords you enter protected from a keylogger that could be on the Windows machine?

[jdhurst]

Even better, install linux on the second computer

Only if you have no regular business work to do. Linux is OK, but posts like this are nonsense in that they do NOT assist the thread.
... JDH

[jdhurst]

There are a couple of solutions if email is the main desire:
1. Boot CD: Knoppix works and Barts PE (XP) works. I find it easier to customize Bart's PE but they both do the job.
2. Convert your cell phone to a Blackberry. Not cheap, but effective, and very small. Does email, of course. It can do web work, but it is not great for that.
3. I like your original suggestion of a second laptop. For the dollars you suggest or a bit more, you can get a decent T machine that will do all that you need. If you can lay your hands on a copy of Symantec Client Security from work, it will do antivirus updates in restricted user mode. Windows updates can wait until you are at the machine. ... JDH

[carbon_unit]

Dave, Here ya' go: http://puppyos.com/flash-puppy.htm It sould get you on the web with most computers and it will ignore any virus/spyware already on the machine. If you don't want to fool with booting from usb there is also a bootable cd version that will create a multi-session cd and will save your changes, passwords, settings, etc back to the cd if the host computer has a cd burner. http://puppyos.com/multi-puppy.htm

jd, He was only talking about doing web based stuff. Besides, everyones definition of real work is different. I get my real work done with linux. Some get their real work done with only a web browser.

[GomJabbar]

Ok, if you boot off of flash puppy, how does flash puppy recognize my Sierra Wireless 860 AirCard, or for that matter my Intel 2200 BG WiFi card?

Actually the work computer at my location is currently tethered to a Nextel iDen phone. Can flash puppy work with that?

[qviri]

Even better, install linux on the second computer

Only if you have no regular business work to do. Linux is OK, but posts like this are nonsense in that they do NOT assist the thread.
... JDH

Have you ever tried VMware?

I would imagine that a Windows virtual machine, known to be secure and used only to run real work software that needs Windows to run, running in VMware (or VirtualBox or KVM or...) in Linux would be pretty darn secure.

[jdhurst]

<snip>
Have you ever tried VMware?

I would imagine that a Windows virtual machine, known to be secure and used only to run real work software that needs Windows to run, running in VMware (or VirtualBox or KVM or...) in Linux would be pretty darn secure.

Check my posts I have been running VMware since Version 1 on NT4 workstation and am now on 5.5.4, so yes, I know about its advantages.

My point here was not well made by me. It is this: If I am using Modern Operating System A and need some assistance, 95 percent of the time shifting to OS B will solve nothing in the large.

All of XP, Vista, MAC Tiger and Modern Linux (choose your own distro) can do real work. However, the business stuff I need (General Ledgers, Security, VPN access, "same" (not just compatible) Documents runs well on XP, but not on the others at this point (I have tried). That doesn't mean they aren't good and useful in their own right (I use Linux from time to time for networking, tracing and sniffing); it just means proposing an OS shift as a solution to an issue is not generally a useful strategy.

My apologies as it appears I overacted to the post. I have tried to clarify here. ... JDH

[jamerslong]

With the puppy linux you can boot from within Windows, ALL settings are saved to the USB stick so you could get the Linux drivers for the car and install it within linux, Vmware requires installation, the puppylinux i use requires QEMU which is stand alone.

Booting form a Stick drive is the best option for COMPLETE secure usage. but can be inconvenient if you have a PC that wont boot from it. i guess if you tried you could use a live CD that will save all settings to a Stick drive and load them as well, i have dont that with Ubuntu before. just cant remember how to do it.

as for a key log i am not sure, i would imagine that it wouldnt bypass it. but it will protect you from people who snoop around in their internet History and try to recover sensitive files.

[carbon_unit]

Gom, I don't know for sure if that hardware will work with puppy. You would have to check the forums. What I can tell you is that Linux is more forgiving when moving from one machine configuration to another one (eg different hardware). If you want to try a custom bootable cd version of windows complete with your drivers and apps try http://www.ubcd4win.com/ . It is more of a diagnostic tool but you could disable the apps you don't need and add the ones you do need. Saving passwords, etc will have to be done on a flash drive. Nothing will protect you from a hardware key logger though.

jd, While i agree with you on most of the above points, an alternative OS was suggested here only so he could have a portable OS on a flash drive or cd to get some essential things done in an emergency. This is easily done with Linux and is possible (but probably not easy) in Windows.

[K. Eng]

All very interesting suggestions. I will evaluate and keep you all posted. Thanks!

[k2jsv]

But what happens if my computer gets destroyed (say, it gets smashed in a tornado while I am at work), and I need to access my email or financial institution's website?

Uh...

Am I the only one that caught this?

I'm sure there is some jest to your statement but... seriously? Do you ever see the light of day? Say your example happens in the literal sense... e-mail (I would think) be the last thing on your mind.

The rest of it is somewhat elementary. If you backup your stuff as a good IT geek does, no worries on lost data (at least significant losses). So you go without reading your e-mail for a few days while you get something else online that meets your criteria for "safe".

Otherwise in the words of Bobby McFerrin, "Don't worry, Be Happy."

[BillMorrow]

first, the concern is valid..

next, i keep my email on a raid array..

and, keep financial info scattered around..
some on an SD card that plugs into my assistans X40..
some on my PDA/transnote..
some on my T60p..

but i think i will start storing (backing up) sensitive and important info on a remote server..
encrypted, of course..

and

lastly, i removed a useless post in this thread..
i don't think anyone but the poster will notice.. which is why i removed it..

[k2jsv]

In case you were replying to me... I never meant that the concern isn't valid. It is most certainly valid, but there is a point where paranoia is unhealthy.

[rkawakami]

A little paranoia is a good thing . For example, would you ever consider using a public PC, be it in a library, coffeehouse, internet cafe, etc., to log into your banking, eBay/PayPal, email, etc. accounts? I would hope that the answer is "no".

Would you be able to recognize if there's a keystroke capture program running in memory or if someone has placed a hardware one inline with the keyboard? Using a friend's or co-worker's system could be exposing you to such a problem since you don't know how it's been used. As somewhat of an example, last year I bought a T21 off of eBay which was said to be part of an estate sale. When I got it I noticed that there were MANY programs running in memory on startup. I found one that was a keylogger, disabled it, and found the logfile. Scanning through that file I was able to get the usernames and passwords to email, AIM and blog accounts. I also found names, addresses and phone numbers typed in by whoever was using that system in the almost two years that the keylogger was running. I used that information to get in contact with the previous owner (who was definitely NOT dead) just to make sure that I had obtained a system which had been properly sold.

Having a "safe" system in storage to be used as a catastrophic backup is probably a good idea if the chances of it being used is a fair possibility. Living in "earthquake country" is just as perilous as being in "tornado alley". A little bit of advanced planning could pay off in "ease of mind".