Saturday, April 29, 2017

Windows 10: 15 important security tips

Security has long been no longer just a topic for corporate PCs – even privately you should observe certain rules. Using the example of the current Windows 10, we explain how to use the security components of the operating system optimally. The PCgo 8/2016 notebook DVD also contains the best protection tools.


TIP 1: Read the WLAN key


The greatest safety gap is and remains the human being sitting in front of the screen. With these tips, you can significantly reduce the risk.


TIP 2: Share the wireless key for contacts


If you have forgotten the security key for your WLAN, but if you are still using a computer, you can read out the WLAN key stored on this computer. Open the network and sharing center by right-clicking on the WLAN icon in the taskbar. Click the Wi-Fi connection, and Wireless Properties in the next dialog box. If you check the Show Character button on the Security tab, the stored WLAN key appears in the plain text


TIP 3: Always show file extensions


So far it is usual to say the key of the own WLAN guests or to put on a - usually already prepared - slip available. How confidential the guests later deal with this key, escapes their own knowledge. Windows 10 provides a much safer method. In the Settings under Wi-Fi / Wi-Fi settings, it is possible to pass the keys for specific WLANs to your own contacts from outlook.com, Skype or Facebook.


TIP 4: Read out web passwords


The key is transmitted encrypted, so the other person never gets to see it in the plaintext. In addition, a WLAN that has been released in this way releases only the Internet access and no access to other PCs within the local network.


Every file has a file name and an ending, which usually consists of three characters. Unfortunately, the Explorer hides these extensions by default, which is a major security risk. They are obtained e.g. An e-mail file info.txt, which later turns out to be a malicious program info.txt.exe


Lesetipp: The best anti-virus programs


Windows leaves several points in the filename, only the last one separates the actual name from the ending. In the explorer's ribbon, under View, select the File extensions check box to see the endings.


Unlike Firefox, the Microsoft Edge Browser in Windows 10 does not provide a way to view stored passwords. Windows stores all passwords from the browser and from apps in the user account. These can be viewed individually in the system control under user accounts / logon information management and can also be removed if desired. The first password to be displayed after opening this system control module is to enter your own user password or logon PIN


In private networks from several computers, you often lose the overview of the shares on your computer. At some point, a particular folder has been released and no longer locked, and now, e.g. New roommates free access to this data. The system tool fsmgmt.msc shows all releases on the PC, network-logged users, as well as shared files that have opened them. Hidden shared with $ signs are not visible in the network environment of the other computers.


In Windows 10, it is easy to prevent automatic startup of programs at system start without having to interfere with the registry. Start Task Manager and click More Details. Go to the Autostart tab. Right-click to clear the autostart of a selected program. It remains in the list and can be activated again at any time to the Autostart. However, the task manager does not find all the ways to start programs automatically. The Autoruns program offers more possibilities.


Until a few years ago, the software components Java and Flash were installed on every PC, as they were the basis for numerous programs. In the meantime, these technologies are famous for their security-critical weak points, are used by only a few programs, but run in the background on most PCs. So check to see if any of your installed programs still need Java, Flash or Silverlight. If this is not the case, uninstall the software using the System Control Panel Programs


If you do not want another user of the computer to see you have visited certain web pages, use the "InPrivate" mode of the browser for these pages. However, this has significant disadvantages: The browser does not store temporary files or cookies. The visited pages are not entered into the history list. They can not be found later, and logon information must be re-entered every time.


TIP 5: Checking the release


Lesetipp: VPN clients in comparison


In addition, all extensions are disabled in InPrivate mode. If you are surfing web pages in an Internet café where you specify your own data, you should always browse in InPrivate mode so that nobody can access your user data later. Even without paranoia, the InPrivate mode has a useful side effect. If you want to see how a page that is notifiable, such as Your own photo gallery or your Facebook profile for the public, open the page in InPrivate mode


TIP 6: Disable Autostarts


Neither the login nor cookies from another browser session are accepted here. The browser looks like an anonymous visitor. This allows you to log into two windows with two different Microsoft accounts or Google accounts on the same PC, which does not work because every new browser window takes over all login caches.


Advertising on websites annoying - especially videos, music, flash ads or fade-ups that are hard to click away. In addition, it is also dangerous, as dubious commercial scripts always attempt to cheer users of malware.


Lesetipp: AdBlocker customization - Add exceptions


TIP 7: Remove Java, Flash and Co.


TIP 8: Meaning and nonsense of InPrivate


TIP 10: Block advertising in the browser


TIP 11: Restricted users for critical work


TIP 12: Customizing user account control according to security requirements


Install an advertising blocker. For Firefox you will find the well-known advertising blocks Adblock Plus and uBlock Origin via the add-ons search. The Microsoft Edge Browser does not support extensions until the Anniversary Update. This is where AdblockPlus and Betafish AdBlock are offered and installed via the Windows Store.


As long as you are logged in with limited rights during your daily work, you can prevent the system from being accidentally damaged by incorrect configuration settings. Also, viruses and trojans can only access the files and system settings that the logged-in user has access to, and thus the system hardly hurts. Also on PCs that are only used by one person, it is recommended to create a restricted user.


Even if the frequent demands of the user account control are annoying, they protect against their own user errors. The user account control offers four different notification levels. The settings can be found in the system control under System and Security / Security and Maintenance / Security in the user account control settings


New software often has features to enable itself during the installation itself in the firewall or even disable the firewall completely. Therefore, the Windows firewall offered only limited protection for a long time. Since Windows 7 automatic access to the configuration of the firewall has been prevented by the user account control. You can access the list of shared programs by clicking on the link An app or a feature through the Windows Firewall in the Control Panel under System and Security / Windows Firewall


Here you can later lock a previously released program at any time. To change something, you must first click Change settings. If you disable the switch to the far left in front of a program in the list, the rule will be removed. If this program wants to transfer data from the Internet again, the firewall is displayed again.


If you are suspicious of an attack or are in a particularly unsafe environment with your notebook, you can use Windows Firewall to turn on or off the firewall settings using the All incoming connections switch, simply ignore all firewall rules, including In the list of approved programs, without having to lock them individually. All connections are blocked. If you disable this switch again, the previously set rules apply again.


Since Windows 8.1 - and also in Windows 10 -, there is a new data backup, which runs without any effort in the background and is also useful in case of operating errors. The file expiration history saves all files in the libraries as well as on the desktop and in the favorites on an external drive at regular intervals and during changes. This protects not only from losses due to hard disk errors or viruses, but also for operating errors since later access to older file versions and earlier changes is still possible. Backup requires an external USB drive or network drive.


Lesetipp: Dateiversionierung - that's how it works


A backup on the local hard drive would also be pointless in case of hardware failure. Switch the file development process in the settings under Update and Security / Backup. Here you also select the folders to be saved. To restore an earlier version of a file later, select it in Explorer, and then click the History icon in the ribbon under Start. In the next window, you can toggle between older file versions. In this way, you can easily find the desired modification status of the file.


TIP 13: Block automatic software access in the firewall


TIP 14: Block Internet connection in case of attack suspicion


TIP 15: Automatic data backup with file version

No comments:

Post a Comment