Adding to this: put the windows side on a fixed IP and block that IP from hitting the Internet at your firewall. No admin access for kid (unless they pass some level of geek test designed by the household head geek - I gave my 12 year old root on his Linux box - there is no windows in this house. He pokes wine to do things I find are pretty slick for his minecraft game and I don't have to).<br>
<br>I get some flack here on occasion when someone wants/needs something that is mickeysoft only. For the gamer, tough, Dad don't care, not getting an XBox even if the thing is free. For the geology grad student, SWMBO, that's a lot harder. Lately all of the winders only stuff she needs have huge license fees and are provided at school. <br>
<br><div class="gmail_quote">On Tue, Apr 12, 2011 at 4:22 AM, JD <span dir="ltr"><<a href="mailto:jdp@algoloma.com">jdp@algoloma.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div class="im">On 04/11/2011 06:16 PM, Trey Sizemore wrote:<br>
> Hi all-<br>
><br>
> Off-topic for the list, but I know there's tremendous knowledge and experience here when it comes to tightening a Windows machine.<br>
><br>
> I've got my daughter's laptop dual-booting Windows 7 and Ubuntu. I've encouraged her to use Ubuntu as much as possible, but realize there are some programs that are not able to run on Linux at this point (tried Wine and others).<br>
><br>
> So for the times she does log in to Windows, I want to have up-to-date anti-virus installed and am looking for some advice on what to use. Also, any other software that would be good to install to help keep the nasties off.<br>
<br>
</div>This is about risk management.<br>
<br>
Don't let her Windows PC on your main subnet.<br>
<br>
Split your network into "teen" and "everything else" subnets. I doubt<br>
you can secure her systemm since she will be using facebook and other<br>
social media. You could block facebook, so the games there can't attack<br>
her machine. She would hate you. There will always be zero-day flash<br>
exploits<br>
<a href="http://krebsonsecurity.com/2011/03/adobe-attacks-on-flash-player-flaw/" target="_blank">http://krebsonsecurity.com/2011/03/adobe-attacks-on-flash-player-flaw/</a><br>
and other exploits. Disabling flash is probably not an option. The same<br>
for PDF. Flash and PDF are the main attack vectors for viruses,<br>
spyware, malware.<br>
<br>
She needs to learn how to secure her PC, and sadly, she needs to get<br>
hacked in order to learn it. I speak from experience having a teen girl<br>
crying over her broken PC and forcing her to reload it herself. These<br>
days, knowing how to do that is like knowing how to change a flat tire,<br>
IMHO.<br>
<br>
If you block facebook - which I have - lots of other things stop<br>
working. Seems that lots of large media companies are using facebook as<br>
a proxy to gain access to their content.<br>
<br>
A few articles about desktop security that may be helpful<br>
<a href="http://blog.jdpfu.com/pages/security" target="_blank">http://blog.jdpfu.com/pages/security</a><br>
<a href="http://blog.jdpfu.com/pages/secure-browser-settings" target="_blank">http://blog.jdpfu.com/pages/secure-browser-settings</a><br>
The specifics may be out of date, but the general ideas are fine. Google<br>
will help you find more.<br>
<br>
Setup an automatic backup for her. Antivirus programs are only 80%<br>
effective. Having one doesn't mean the computer is safe, regardless of<br>
which program it is.<br>
<div><div></div><div class="h5">_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>-- <br>James P. Kinney III<br>I would rather stumble along in freedom than walk effortlessly in chains.<br><br><br>