first of all, thank you for this very helpful information and those epic vids

I got a general question: Is not a RSA security token limitating the likelihood of being hacked towards zero?

The RSA token is extremely effective at preventing malicious access to your accounts but it is not 100% effective.

Even with an RSA token there are still plenty of ways to get hacked if you are not following proper security practices.

Hi funkyworms, thanks a lot for the videos much appreciated.

Do you know whether or not my email is it a higher risk of begin hacked if I have it setup on my BB so that they get sent directly to my phone? Ie I dont have to type in a password.

Also, I use noscript like you advised, although didnt fully understand what its purpose is and after researching it I'm still not too sure anyway basically it will block scripts on any site I go on which means I cant see everything on the webpage, unless I click allow scripts.. how do I know if I should allow scripsts on a site, or if I trust a site? It seems to me that it is just a sort of website blocker that asks if you trust the site when you go on one, and if yes you can view it.. but how does one know if the site is safe or not?

Thanks man

I am getting a new laptop funkyworms from Dell. I am defiantly going to install my own operating system because of all the junk that Dell installs. I am wondering what your thoughts are on using Linux (probably ubunutu) as the main operating system and then using virtualbox for windows xp or 7. Also would virtualbox be better or dual boot? Another thing what is recovery like? For example if linux corrupts and breaks can I still get access to the Windows virtual machine? Something else would using a virtualbox lag with a big hem database and 6 tables?

Great, just what I needed.

My keepass doesnt have a 'memory' option in the tools section??

Sweet!

I have covered Virtualbox in a previous post.

I recommend Virtualbox over a dual-boot.

Yes you will have access to clone your VM if Linux becomes corrupted assuming that the corruption wasn't the result of a disk error.

It just depends on the speed of your machine and the size of your DB, but even with a very large DB and modest laptop specs you should be able to handle 6 tables with no lag.

If you lose your phone then someone will have access to your emails, but your password is still being entered somewhere along the way so no I don't think it increases you likelihood of being hacked. You might consider password protecting your BB, though.

Don't worry too much about which scripts to allow in NoScript. If a page is broken then allow scripts on that domain. If the page is still broken then start temporarily allowing other domains. Once you learn which scripts are required then revoke all of the temporary permissions and make the required permissions permanent. Eventually you'll learn which domains are needed and which are simply serving ads/crap.

If a page looks sketchy just move along and don't allow any scripts. Recognizing sketchy pages will have to be learned on your own.

surely the idea of keeping all your passwords in one database is kinda dumb? if people know this is popular attention and effort from dubious folk will be put into crcaking these?

Um, no you can't crack keepass provided you have a decent master password. You can hack it through human error like anything else but to crack the encryption it would take 50 years on a consumer class computer with technological advances taken into account to do so. To help the case get one of those http://www.yubico.com/products/yubikey/ It works with keepass.

like the sound of the yubikey, do you have one? hoe does it work, does it enter your passwords for you or just allow you to get onto your machine?

am i screwed if i lose it?

It works on any computer that has USB and it acts as a keyboard. You press a button and it automatically enters a long password that you set earlier. You can lock computer with it or use it to open you keepass db or check email etc.

It can also work similar to the RSA token from Stars and its actually more secure than RSA token. But the website you access would have to support it. So far none of the poker websites do. But google apps, fastmail and many security software products like keepass and truecrypt support it. Since it is opensource and so cheap it grows fast.

Also since it is opensource you don't have to worry about whats built into it.

And you can just use a second yubikey as a back up. Or write the password down on a piece of paper and store it in a safe place old fashioned way.

Also, heard good things about this http://www.youtube.com/watch?v=tggvtg1hX2U Works with Windows and Mac and there are limited Linux drivers too.

good shout cheers for the help

Can you get it to work to log into windows?