Windows XP Pro Security Issue

[aboka]

Hi! I started to use XP Pro a couple months ago, and I thought that I am very 'secure' with it until I read some article that mention about a program that could hack and change any password on the local PC.

I would like to know if MS 'did' something on this(with some patches, etc) and what else could we do secure a XP machine?

FYI - I am using a 'strong' password and EFS now on a stand alone Windows Xp Pro with all available patches from MS

[njovin]

It would help to know what program it is you're talking about.

A few things to keep in mind:

-The first rule of security is that if someone gains (physical) access to you machine, it's pretty much hacked. That means it ain't hard for someone to get you're stuff if they have access to actually sit down at your machine.

-XP is pretty secure as far as remote access goes. Obviously, if you are on a broadband connection, you want some kind of firewall, whether it be in the form of a router, physical firewall, or software firewall (check out www.zonealarm.com).

-If you're paranoid, turn off any services you don't need, and make sure remote access (desktop assistance or whatever they call it) is disabled if you're not accessing your machine from a remote location.

[aboka]

Wow, talk about secure coputing from MS. I know its *impossible* to 100% secure a 'thing', but whats the best method XP Pro could provide(beside setting a password and EFS)?

I have all the hot fix and patches installed, and using a quite secure password. Yeah, I am only using the PC as a stand alone without connecting to any domain/network or internet.

[njovin]

There are lots of programs that will recover EFS encrypted files (check out astalavista.box.sk WARNING they have porn popups but are an EXCELLENT security resource). But if you're completely standalone, I wouldn't worry too much about it anyway. If you are SUPER paranoid, get a removable hard drive, and store all of your sensitive stuff on that, and always take it with you

[aboka]

Hi! I am searching for the mention file, I need to see it to believe it! Well, if EFS is not 'secure' then whats all the 'secure computing' MS is talking about all the time????

So, on conclusion - Do you mean that if I really need to secure my XP Pro(files), I need a third party encrption software?

[aboka]

Hi! Even thought the Pc is stand alone, but I share the PC with other people in the office, thats make them have physical access to it.

note - removable drive is an option; but only as the last

[njovin]

As soon as someone builds a bigger lock, someone else is going to build a bigger key. The encryption of 15 years ago is a joke today. No, EFS is not 100% secure, but it would take someone in your office a whole hell of a lot of smarts and trouble to break that encryption.

Your files are probably fine how they are, settle down about it.

[lewis]

Unless, your surfing the porn sites, or warez, your computer will be fairly secure.

Just be sure to use a strong anti-virus program. A trojan protecton program and a firewall like zonealarm,sygate, etc.

If lots of others are using the system on the net, you'll never be 100% safe.

Thats the nature of the beast.

[aboka]

Hi! Sorry to have ask the same question again. I got all our company's client info, etc on the Pc, thats why I am little paranoid about it(you might suggest I purchase another Pc, but thats not an option).

So whats your best advice - If I want to secure files on my Pc? A hardware dongle, thumb scan, encryption(AES), etc? Please give details of your reply(ie - AES TwoFish 128bit, etc, etc)

[njovin]

You've got your stuff encrypted with EFS, that's FINE.

Like I said, you sound WAY too paranoid, so just buy a removable hard drive and keep important stuff on there.

[scouse]

Originally posted by njovin
You've got your stuff encrypted with EFS, that's FINE.

Like I said, you sound WAY too paranoid, so just buy a removable hard drive and keep important stuff on there.

what he says all the way if you are that parranid mate.

[aboka]

Thank you for all the help to all the expert who reply.