Pages

Wednesday, January 9, 2013

Safe Computing on a Budget, Part 1: Get a new browser

The top question I get involving computers is how to avoid viruses. I've had a computer in the house since 1994, been online since 1995, designing web sites since 1996 and had almost no viruses in that timeframe. What? Wait... did I just write that correctly? Almost no viruses? Well, I can't say never, but they've been few and far between. Never had my identity stolen, never had my computer hacked into. And I am not running state-of-the-art computer software by any means.

(Please note, this is not a challenge to would-be hackers. I know I'm mainly just lucky. The end.)

One of the reasons I keep relatively virus free is because I take a step-by-step approach to using the internet. And I have several free tools that, along with good practices, keep me relatively virus free.

Keep in mind I have found viruses on files I've downloaded. No one can say that they did something to avoid downloading viruses. Even CNET's Download.com, one of the longest-running free software servers in the internet, has let some slip by in uploads that had new viruses their own software couldn't detect. It happens. But there is a difference between "downloading" a virus and "getting infected by"a virus.

In this multi-post series I will outline my setup, and I suggest trying this to reduce your risk of infection. Please note I spend no money on these items at all, but some have a paid version that does have some nifty upgrades you could look into if you are so inclined.

First line of defense: Google Chrome

They like to claim otherwise, but both Internet Explorer and Firefox have exploits and functionality deficits that make them more susceptible to attacks from rogue web sites and overall slower to respond. Here's how it usually works in terms of getting a virus from just looking at a web site:
  1. You click on a link or type in a web site.
  2. That web site is run by a "black hat", or computer hacker that distributes harmful viruses. Sometimes you can tell by the way the link is read like "http://www.yahoo.nwp1.com/, which kinda looks like yahoo.com but is obviously different). But sometimes the web site is legitimate and has itself been hacked by this distributor of evil.
  3. The web site looks for a way to save a file on your computer, which is the only way it can get in. Unless you download it yourself on purpose, files saved to a computer are limited to image files (most of which cannot contain viruses), text and "plugins" such as Flash, Java or otherwise that run multimedia content or provide specific computing functions.
  4. The hacker will usually hide the virus in a plugin, which is used by the browser (IE, Firefox, Chrome, Opera, Safari, etc) by downloading a file into a temporary part of your hard drive to help speed up the use of the media.
  5. Once the file is saved, it uses how the browser opens the file to launch the virus and start the infection.
This seems like a long process, but it can happen in a matter of seconds. To their credit, browser developers have secured their browser software to prevent these kind of exploits, but there are specific functions of ActiveX, a plugin specifically used on Internet Explorer, that allow functions that can seriously compromise your security, usability and functionality of your computer.

One of the first things I did after I heard that there were other browsers out there was to switch from IE to Firefox. I used that for a long time, and in designing web sites I made sure Firefox users could see my web sites clearly. However, it also had the ability to install browser bars and other plugins that, as well, had exploits hidden in them. It also uses a lot of memory and has processing bottlenecks that cause it to run a lot slower than other browsers. I have admittedly not used it much, but my wife does still, and has had to shut down Firefox so she can run things like media streams without issues.

One of the most common source of viruses today is browser bars, those add-ons that give you a bar at the top of your browser that searches for you, gives you smiley faces in your emails or claims to give you faster browsing speed. These things are not only crapware but potential security risks because they load every time you load your browser. IE and Firefox are notorious for people purposely or accidentally installing browser bars that either stop their internet browsing cold or cause other infections on their computer.

Google Chrome has been historically very clean, a side effect of being based on Apple Safari and its simple yet secure structure. More recently they have allowed the use of "extensions" that give it more functionality, and that can sometimes also be a source of break-ins. So just keep Chrome the way it is and you shouldn't have much to worry about. Chrome even links up with major security indexes and warns you if you're going to a site that has been reported as harmful or dangerous.

Opera, which is another browser software with a smaller following, has also been quite secure but has historically had functionality issues with some web sites. The problem with Opera is that many designers of web sites do not test their site in that browser, which can cause unwanted display problems like images being in the wrong place or text being the wrong size. Many sites suggest using IE or Firefox because of their high level of adoption among internet users. Chrome, the basis of Google's new Chromebooks, is well tested and compatible with almost all web sites. However, I use Opera Mobile on my phone as a much better alternative to Android's built-in browser.

Ultimately the use of these browsers is up to you as to which one will feel most comfortable and do what you want it to do. I just urge you to stay away from Internet Explorer.

Changing your browser is not, in itself, going to keep you from contracting viruses. In my next post, we discuss the reason even Chrome extensions are sometimes bad and what is even more important that finding the right browser: knowing what you're downloading!


While you're at it, check out this good starter laptop for any age of student!

No comments:

Post a Comment