Comment by dgesang | Hacker News Reader

Comment by dgesang | Hacker News Reader

I haven't used any antivirus software in years, IMHO they're just annoying and reduce performance (used to use NOD32 until 2007, loved it back then). Here is what I do instead:

  - surf the web consciously
  - do not open any email attachments from unknown senders (seriously, it's 2013, who does that anymore?)
  - do not open any URLs from unknown senders (same as above)
  - disable unnecessary browser plugins (i.e. everything but Flash)
  - use NoScript-like browser addons
  - only run executables I 'trust' (tough one, I know)
  - run executables I do not 'trust' in sandbox or VM
  - properly configured router firewall settings
  - * software firewall to monitor & block/allow incoming *and outgoing* connections (Comodo Firewall)
  - * work with a user that does not have root/admin privileges (*Power User* privileges are sufficient for daily work)

Esp. the last two points are important and unusual. This requires a certain level of knowledge about IT, computers and some common sense, though.

If I really need to check a file for malware I use webtools like http://virusscan.jotti.org

What you described is similar to my process (though on Windows I always install MSE now too), but it's important to acknowledge the limitations of such an approach. For example:

    - do not open any email attachments from unknown senders (seriously, it's 2013, who does that anymore?)
    - do not open any URLs from unknown senders (same as above)

These only work as longs as no one you know gets hacked. You're vulnerable as much as the weakest person in your trusted network, and I guarantee others in your network aren't as careful as you. So it's not just avoiding URLs and attachments from unknown senders, it's avoiding URLs and attachments even from people you know and trust that you weren't expecting them to send you. I've come really close before to clicking links from friends that said something along the lines of "Holy crap, this is you", which is actually sometimes expected because I have friends who see articles or pictures written about or by me.

True, even mail from known senders has to be dealt with care as well.

    "holy crap, this is you"

This scam could be avoided easily by checking the links actual URL before clicking on it. And even if you click and end up with some malware infected website, disabling all unnecessary and insecure browser plugins and using NoScript should be enough protection. If it's not, the restricted privileges hinder the malware from doing serious damage (e.g. rewriting/deleting system files).

Reply on news.ycombinator.com