Two Plus Two Publishing LLC Two Plus Two Publishing LLC
 

Go Back   Two Plus Two Poker Forums > >

Notices

Computer Technical Help Post your questions about computer hardware and software and configuring same here.

Reply
 
Thread Tools Display Modes
Old 11-14-2010, 03:44 PM   #201
funkyworms
Pooh-Bah
 
funkyworms's Avatar
 
Join Date: Jun 2004
Posts: 4,249
Re: Computer Security for Poker Players (videos)

Quote:
Originally Posted by Syndr0m View Post
I just did everything from the vids apart from the Untangle thing.

How does the fact that my desktop has another user (my brother, NOT admin acc) affect my poker account security? Is it dangerous if he is not as cautious as myself?

Btw thanks funkyworms. This topic is pure gold. It scares me that I've been around this long without realizing how vulnerable I was!

Edit: and is there a way to thoroughly check your system for malware? I'm thinking antivir scan, adware scan (are people still using this? Havent used it in years) and/or hijackthis
Your brother could compromise your security, but if you have UAC at the maximum level and he's on a non-admin account then you should be okay. It's not an ideal situation though.

The best way to scan your computer is with an offline anti-virus scan using a Linux LiveCD. I wrote up instructions for using the Avira Rescue System.
funkyworms is offline   Reply With Quote
Old 11-14-2010, 03:48 PM   #202
funkyworms
Pooh-Bah
 
funkyworms's Avatar
 
Join Date: Jun 2004
Posts: 4,249
Re: Computer Security for Poker Players (videos)

Quote:
Originally Posted by Syndr0m View Post
Just read the whole topic and I understand now that there is nothing you can do to protect your passwords, even from KeePass, once a keylogger gets on to your PC, so nevermind this last question

What are your thoughts on Sandboxie?
Any idea what the best way to set it up is?
It seems like it's only securing my internet browser (FF) by standard...

And is downloading from paid newsgroups (giganews) as dangerous as downloading from torrents?
Sanboxing your browser is a good idea. I don't have any opinions on Sanboxie because I've never tried it out. There are free DIY sandboxing alternatives. I usually suggest that people create a VM for their browsing and only use their host browser when they want to download something.

Not going to comment on newsgroups vs torrents other than to say you shouldn't download copyrighted material illegally and that pirated software is dangerous regardless of the source.
funkyworms is offline   Reply With Quote
Old 12-01-2010, 06:45 AM   #203
dauv
newbie
 
Join Date: Jul 2008
Location: Denmark
Posts: 41
Re: Computer Security for Poker Players (videos)

Hey Funkywurms

First of all really awesome guide you put up. Really appreciated!

I have a few questions - if you don't mind.

1. How do you pick a good masterpassword you can remember? Do you have any tips? Would you recommed a password phrase?

2. I've heard it should be more secure to play poker on a virtual OS. Do you know anything about that? Or is it completly irrelevant if I follow all your security tips?

3. Do you have any experience with Password Safe? One of my teachers (who work with computer security) swears by it, but his opinion might be biased..

Thanks in advance
dauv is offline   Reply With Quote
Old 12-01-2010, 01:04 PM   #204
funkyworms
Pooh-Bah
 
funkyworms's Avatar
 
Join Date: Jun 2004
Posts: 4,249
Re: Computer Security for Poker Players (videos)

1. I can't really answer this because it's different for every person. A passphrase will work. Just remember to add special characters and numbers.

2. Playing poker in a virtual OS isn't necessarily any safer than playing on the host OS. There are two different ways you can approach running virtual machines for the safety conscious.

a) Run Linux as your host OS and play poker in a Windows VM.
b) Run Windows and play poker on your host OS and do all of your internet browsing in a VM (Windows, Linux, BSD, whatever)

3. Keepass Password Safe is merely an improved version of Password Safe. Both are free and open source. Use either one.
funkyworms is offline   Reply With Quote
Old 12-02-2010, 03:26 PM   #205
dauv
newbie
 
Join Date: Jul 2008
Location: Denmark
Posts: 41
Re: Computer Security for Poker Players (videos)

Thanks for your answers!

I got 2 more question..

1. Untill now I've been running without a Firewall & Firefox with NoScript. I have no signs that I've been infected by any form of malware.. But would you recommend me that I reformat my PC and follow all of your advice from a freshly installed PC?

2. Really enjoyed your Windows XP guide, but I run with Windows 7 on my main computer. Was just wondering if you have any advice for how to make a fast unattended version of Windows 7? (what integrations, components etc. I can disable to make it run faster)
dauv is offline   Reply With Quote
Old 12-02-2010, 03:42 PM   #206
funkyworms
Pooh-Bah
 
funkyworms's Avatar
 
Join Date: Jun 2004
Posts: 4,249
Re: Computer Security for Poker Players (videos)

Quote:
Originally Posted by dauv View Post
Thanks for your answers!

I got 2 more question..

1. Untill now I've been running without a Firewall & Firefox with NoScript. I have no signs that I've been infected by any form of malware.. But would you recommend me that I reformat my PC and follow all of your advice from a freshly installed PC?

2. Really enjoyed your Windows XP guide, but I run with Windows 7 on my main computer. Was just wondering if you have any advice for how to make a fast unattended version of Windows 7? (what integrations, components etc. I can disable to make it run faster)
1. If your computer shows no signs of infection then I don't recommend a reformat. Now for some clarification. Do you mean you have been running without a software firewall (Comodo, Zonealarm, etc)? or Do you mean that you have been running without a router (i.e. Plugging directly into your cable modem). I don't recommend any software firewalls, but I recommend using a router with NAT (aka hardware firewall). I also recommend installing NoScript immediately.


2. Win7 guide will come. I don't have a firm release date and it's been pushed back more than the release of Starcraft 2, but it will be released eventually. I promise. (Hopefully before the release of Wndows 8).
funkyworms is offline   Reply With Quote
Old 12-02-2010, 04:19 PM   #207
dauv
newbie
 
Join Date: Jul 2008
Location: Denmark
Posts: 41
Re: Computer Security for Poker Players (videos)

Quote:
1. If your computer shows no signs of infection then I don't recommend a reformat. Now for some clarification. Do you mean you have been running without a software firewall (Comodo, Zonealarm, etc)? or Do you mean that you have been running without a router (i.e. Plugging directly into your cable modem). I don't recommend any software firewalls, but I recommend using a router with NAT (aka hardware firewall). I also recommend installing NoScript immediately.
I meant I havn't been running with a software firewall (as in windows defender / comodo etc.).. My internet goes through a router, but I'm not sure it has NAT (but I will try to check it out)..

Quote:
2. Win7 guide will come. I don't have a firm release date and it's been pushed back more than the release of Starcraft 2, but it will be released eventually. I promise. (Hopefully before the release of Wndows 8).
Sounds very good
dauv is offline   Reply With Quote
Old 12-16-2010, 01:46 PM   #208
Campos
Guest
 
Posts: n/a
Re: Computer Security for Poker Players (videos)

What a great read that was! And I thought I had decent knowledge about Windows security... Thank you so much, funkyworms!

I have two questions, though:

1. I heard that poker platforms (at least PS and FTP) perform some sort of scanning through your system. Not that I'm doing anything wrong, but I'm a bit paranoid and don't feel comfortable about that. Would running PS and/or FTP through Sandboxie or Virtual Box prevent this ? I also used to run PS through Wine on my previous job. I was feeling much better about my system back then, despite the limited functionality (you know what I mean if you have ever used Wine).

2. KeePass is amazing! I can't believe I never thought about googling something like this. I am still tweaking the program and I wonder how safe it is to upload my database on a web server for easy access from everywhere ? Any tips on how to secure the link, if of course there is any need at all ?

I appreciate your time and effort.

Last edited by Campos; 12-16-2010 at 01:48 PM. Reason: typo
  Reply With Quote
Old 12-16-2010, 03:06 PM   #209
funkyworms
Pooh-Bah
 
funkyworms's Avatar
 
Join Date: Jun 2004
Posts: 4,249
Re: Computer Security for Poker Players (videos)

Quote:
Originally Posted by Campos View Post
What a great read that was! And I thought I had decent knowledge about Windows security... Thank you so much, funkyworms!

I have two questions, though:

1. I heard that poker platforms (at least PS and FTP) perform some sort of scanning through your system. Not that I'm doing anything wrong, but I'm a bit paranoid and don't feel comfortable about that. Would running PS and/or FTP through Sandboxie or Virtual Box prevent this ? I also used to run PS through Wine on my previous job. I was feeling much better about my system back then, despite the limited functionality (you know what I mean if you have ever used Wine).

2. KeePass is amazing! I can't believe I never thought about googling something like this. I am still tweaking the program and I wonder how safe it is to upload my database on a web server for easy access from everywhere ? Any tips on how to secure the link, if of course there is any need at all ?

I appreciate your time and effort.
1. If you put a poker client in a VM then the client will only be able to scan the VM. It will not touch the host OS. Using a VM is much easier than using Wine, imo.

2. Make sure to back-up your database somewhere. I prefer local and online backups. Dropbox makes it easy to sync your database across multiple computers. It also allows you to have access to your database using just a web browser. Strong Keepass Master PW + strong Dropbox PW = very secure.

If you're super paranoid about securing your database, you might consider adding a key-file to your authentication mechanism. I don't recommend this for everyone because it can be a burden, and if you ever lose the key-file you're hosed.
funkyworms is offline   Reply With Quote
Old 12-19-2010, 10:55 AM   #210
pawppy
banned
 
pawppy's Avatar
 
Join Date: Dec 2007
Posts: 83
Re: Computer Security for Poker Players (videos)

very nice thank you funkyworms!!

two questions..

open source programs don't actually provide any guarantee do they since unless you are a very skilled programmer to check out the source yourself, you just have to trust that others have thoroughly checked it out but also there is no guarantee that the compiled software is the same as the version in the open source is there?

also don't know how stupid of a question this is in 2010 but are there still ways to compromise a computer's BIOS or booting sequence with flash drives
of some sort?

please also check out my pm. i wanted to post here but the forum crashed right before i posted it i guess it's still a very big chance that it was just coincidence but anyway i guess i just chose not to post in here. hope it's okay with u. thanks
best of luck!
pawppy is offline   Reply With Quote
Old 12-21-2010, 09:28 AM   #211
175503
banned
 
175503's Avatar
 
Join Date: May 2009
Location: MONEY IS FOR POOR PEOPLE!
Posts: 3,427
Re: Computer Security for Poker Players (videos)

This is awesome, I just read the entire thread and think it's all really good. Keepass is insane.
I have one question and two comments


Quote:
Originally Posted by ThePolygraph View Post
Thanks a lot for producing these videos funkyworms, they really are so informative! I was pleased to see that I already take some of the precautions you recommend, but there are a few things I'm not clear on:

No-Script

I don't have a clue about how scripts work, but I'd like to understand this better. You mentioned that if one were to use Firefox with No-Script it would be pretty much impossible to get infected from browsing YouTube. But then you allowed (white-listed) the youtube & ytimg domains. Does this mean that if a dangerous script were on that page, it would be listed as something other than those two?

Also, since I installed No-Script, I have only been to a handful of sites but have had to allow scripts at most of them. Right here for example, when typing this post, I had to white-list 2+2 before I could use the bold/italics buttons in the editor. As I'm not an expert on these things and, if I need to keep 'allowing' all the sites I want to visit then isn't it just like a novice who uses a personal firewall and clicks 'allow allow allow'?

I don't mean this to sound like an argument haha. It's just that if I have to allow scripts at every forum, every site that has embedded videos, every site that uses flash etc, then it basically comes down to 'allow everything, but don't visit suspicious sites' which is just like saying 'don't install trash and you won't need to use something like Comodo'. Hopefully I have misunderstood how this works, and will be tutored shortly! I mentioned the firewall thing here because, for some time, I was doing exactly what you said - using Comodo and after deciding that I will install something, then just clicking 'allow allow allow' which is pretty damn pointless lol.
Can you elaborate on this? This is my exact sentiment. When I saw you accept ytimg in your video my first thought was "How does he know it's safe?" I installed noscript a long time ago and got rid of it because I was just clicking yes to everything unless it was on a sketchy site, and now I just don't go to those kinds of websites.


My two comments are

1.) I think not storing your stars PW is a good idea. Keepassing it means it won't stay in the clipboard for more than x seconds(12 by default) and if you have people over and forget it's a lot easier for someone to just see if you have a poker program, run it and gain access to your account. Obviously if you're using other means of security(pin etc) the chances are almost non-existent but I still don't see the harm. (unless this is what you meant by storing it lol)
2.) u r awesome and your avatar is amazing
in any case A+ would read again, my hulu password is 108 bits <3

EDIT: Oh yeah, I feel it it can not be emphasized how important it is to back up your keepass DB

If your HD fails or you can't boot because of some lame Windows **** or your cyberlife is ******! IMO store it on a seperate HDD as well as a thumb drive and I feel if you're going to get a safety deposit box and put your PW in it, you might as well throw a backup in there, too.
175503 is offline   Reply With Quote
Old 12-21-2010, 01:13 PM   #212
Campos
Guest
 
Posts: n/a
Re: Computer Security for Poker Players (videos)

The way I'm planning to do it with KeePass is this:

- Store the database on a webserver for easy access from everywhere. For better security it would be stored in a subfolder of a subfolder of a subfolder (and so on), usually one letter names per folder, like domain.com/p/a/s/s/w/o/r/d/database.kdbx
It may be a different word or random characters. I could also add many other folders and files inside of each subfolder for confusion, in case someone gains access to my ftp server for example.

- Store a key file on a flash drive I always carry with me. My settings require both master password and the key file in order to access the database.

- keep a backup of both on my cell phone. Usually a new folder somewhere within the system files. Even if its stolen, who would look there ?

- keep a backup of both on another flash (just in case something happens to the other backups), hidden somewhere at home or with someone I trust with very poor computer knowledge - grandma for example.

I am not sure how the portable version of KeePass works. I might give it a try for accessing my passwords on other computers. Have to test it.

I really need to remember only the character sequence for the database address and one long strong password. Simple.


I have two more questions:
1. Sometimes I use my company VPN for accessing poker platforms. One thing I notice is that PS for example doesn't remember my password when running through the VPN. Why is this ? As far as I understand, this should not affect the .ini file where the password is saved. Apparently, I am wrong... And when I enter my PIN, is there any way for some mad genius administrator to see it ? How secured is a secure connection through a VPN (given the fact that the VPN is not mine and not for personal use) ?

2. After installing most of the suggested add-ons in this thread (could be related, not sure), Mozilla stopped automatically inputing the stored usernames and passwords into the fields for sites it used to. They are still there, but something is preventing the browser from using them. I would be thankful if someone gives me a hint on this, as I was not able to find any info on Google. Cleared my cookies, cache, everything, but no luck.

Sorry if this is too long.
  Reply With Quote
Old 12-22-2010, 01:31 AM   #213
funkyworms
Pooh-Bah
 
funkyworms's Avatar
 
Join Date: Jun 2004
Posts: 4,249
Re: Computer Security for Poker Players (videos)

Quote:
Originally Posted by Campos View Post
The way I'm planning to do it with KeePass is this:

- Store the database on a webserver for easy access from everywhere. For better security it would be stored in a subfolder of a subfolder of a subfolder (and so on), usually one letter names per folder, like domain.com/p/a/s/s/w/o/r/d/database.kdbx
It may be a different word or random characters. I could also add many other folders and files inside of each subfolder for confusion, in case someone gains access to my ftp server for example.

- Store a key file on a flash drive I always carry with me. My settings require both master password and the key file in order to access the database.

- keep a backup of both on my cell phone. Usually a new folder somewhere within the system files. Even if its stolen, who would look there ?

- keep a backup of both on another flash (just in case something happens to the other backups), hidden somewhere at home or with someone I trust with very poor computer knowledge - grandma for example.

I am not sure how the portable version of KeePass works. I might give it a try for accessing my passwords on other computers. Have to test it.

I really need to remember only the character sequence for the database address and one long strong password. Simple.


I have two more questions:
1. Sometimes I use my company VPN for accessing poker platforms. One thing I notice is that PS for example doesn't remember my password when running through the VPN. Why is this ? As far as I understand, this should not affect the .ini file where the password is saved. Apparently, I am wrong... And when I enter my PIN, is there any way for some mad genius administrator to see it ? How secured is a secure connection through a VPN (given the fact that the VPN is not mine and not for personal use) ?

2. After installing most of the suggested add-ons in this thread (could be related, not sure), Mozilla stopped automatically inputing the stored usernames and passwords into the fields for sites it used to. They are still there, but something is preventing the browser from using them. I would be thankful if someone gives me a hint on this, as I was not able to find any info on Google. Cleared my cookies, cache, everything, but no luck.

Sorry if this is too long.
I recommend storing your Keepass database on Dropbox or similar file-syncing tool. Dropbox enables you to store a copy of your db on multiple computer and online. It also keeps it sync'd between all computers and preserves old versions in case you make a mistake.

I wouldn't put my keepass db on a public webserver. Dropbox is much easier.

1. You'll have to ask Stars about their security measures. Re: VPN - Anywhere from very secure to not secure at all. I can't answer this question without knowing who has access to your keys and VPN server.

2. It's possible that you enabled a master password, or maybe there is something in NoScript that is blocking a login prompt.
funkyworms is offline   Reply With Quote
Old 12-22-2010, 01:34 AM   #214
funkyworms
Pooh-Bah
 
funkyworms's Avatar
 
Join Date: Jun 2004
Posts: 4,249
Re: Computer Security for Poker Players (videos)

Quote:
Originally Posted by 175503 View Post
2.) u r awesome and your avatar is amazing
Yep.

Also, I now ytimg.com is a youtube content delivery domain. That is why I allowed it. The site would be broken without it.

My basic rules of NoScript.... Just add domains one by one until the site works properly. Then remove the ones that you didn't need. I think I described this in more detail earlier in this thread.
funkyworms is offline   Reply With Quote
Old 12-28-2010, 02:11 PM   #215
brendons31
old hand
 
Join Date: Sep 2004
Location: San Sebastian, Spain
Posts: 1,454
Re: Computer Security for Poker Players (videos)

The keepass database is basically impossible to access without the password right? So could you just make a basic gmail account with a simple password and store it on there, and also email a copy of the database to parents in case you forgot the password?
brendons31 is offline   Reply With Quote
Old 12-31-2010, 03:28 AM   #216
vektor
adept
 
Join Date: Oct 2010
Posts: 950
Re: Computer Security for Poker Players (videos)

I multi-table and have TN and stackandtile. Just recently I have been receiving a number of attacks while doing nothing but playing. It's the same few IP's that are doing it and it slows my laptop down a lot when it happens, this sucks when I have a few hundred dollars sitting on the tables and I am staring at a frozen screen. Any advice on why this could be happening? This is a completely clean computer that never goes near any NSFW sites and only recently have I noticed these attacks happening. It's TIDSERV Request attacks that are happening, is this possible without me having downloaded something or did I download a virus somehow.

Last edited by vektor; 12-31-2010 at 03:34 AM.
vektor is offline   Reply With Quote
Old 01-01-2011, 09:08 PM   #217
funkyworms
Pooh-Bah
 
funkyworms's Avatar
 
Join Date: Jun 2004
Posts: 4,249
Re: Computer Security for Poker Players (videos)

Quote:
Originally Posted by vektor View Post
I multi-table and have TN and stackandtile. Just recently I have been receiving a number of attacks while doing nothing but playing. It's the same few IP's that are doing it and it slows my laptop down a lot when it happens, this sucks when I have a few hundred dollars sitting on the tables and I am staring at a frozen screen. Any advice on why this could be happening? This is a completely clean computer that never goes near any NSFW sites and only recently have I noticed these attacks happening. It's TIDSERV Request attacks that are happening, is this possible without me having downloaded something or did I download a virus somehow.
You should start a new thread and follow the malware sticky. Please include the program that is detecting these TIDSERV requests.
funkyworms is offline   Reply With Quote
Old 01-03-2011, 11:44 PM   #218
Antidote
grinder
 
Antidote's Avatar
 
Join Date: Mar 2008
Posts: 658
Re: Computer Security for Poker Players (videos)

Is Microsoft Security Essentials a suitable antivirus, anti-spyware and anti-malware solution?
Antidote is offline   Reply With Quote
Old 01-05-2011, 06:42 AM   #219
pawppy
banned
 
pawppy's Avatar
 
Join Date: Dec 2007
Posts: 83
Re: Computer Security for Poker Players (videos)

Quote:
Originally Posted by pawppy View Post
very nice thank you funkyworms!!
also don't know how stupid of a question this is in 2010 but are there still ways to compromise a computer's BIOS or booting sequence with flash drives
of some sort?

is there any method to secure against bootable flash drives or CDs?
uhm could you please give us your opinion on this ? Thanks. Have a healthy happy 2011!!
pawppy is offline   Reply With Quote
Old 01-08-2011, 03:57 AM   #220
RedDog2011
stranger
 
Join Date: Jan 2011
Posts: 5
Re: Computer Security for Poker Players (videos)

How about NIS2009? It seems to do everything is needed in order to be protected.
It does anyway slowing down the CPU...
RedDog2011 is offline   Reply With Quote
Old 01-16-2011, 04:11 AM   #221
jondewalt
journeyman
 
Join Date: Feb 2010
Location: LA and Chicago
Posts: 231
Re: Computer Security for Poker Players (videos)

Is there any way for Mac users to get hacked via virus/trojans etc. from browsing the web? People always say Mac's don't get viruses, that's just Windows. Is that really true?
jondewalt is offline   Reply With Quote
Old 01-19-2011, 01:04 AM   #222
175503
banned
 
175503's Avatar
 
Join Date: May 2009
Location: MONEY IS FOR POOR PEOPLE!
Posts: 3,427
Re: Computer Security for Poker Players (videos)

Setting the delay between entering the PS and it actually opening, is that only for the program or is it embedded in the actual database?

Meaning if I keep it at 2 seconds is it going to be 2 seconds if someone installs Keepass on a laptop and tries to break my my PW on their own computer?
175503 is offline   Reply With Quote
Old 01-19-2011, 01:41 AM   #223
funkyworms
Pooh-Bah
 
funkyworms's Avatar
 
Join Date: Jun 2004
Posts: 4,249
Re: Computer Security for Poker Players (videos)

Quote:
Originally Posted by 175503 View Post
Setting the delay between entering the PS and it actually opening, is that only for the program or is it embedded in the actual database?

Meaning if I keep it at 2 seconds is it going to be 2 seconds if someone installs Keepass on a laptop and tries to break my my PW on their own computer?
I'm not sure what you're asking but the answer is almost certainly no.
funkyworms is offline   Reply With Quote
Old 01-19-2011, 01:43 AM   #224
funkyworms
Pooh-Bah
 
funkyworms's Avatar
 
Join Date: Jun 2004
Posts: 4,249
Re: Computer Security for Poker Players (videos)

Quote:
Originally Posted by jondewalt View Post
Is there any way for Mac users to get hacked via virus/trojans etc. from browsing the web? People always say Mac's don't get viruses, that's just Windows. Is that really true?
Yes macs can get viruses from browsing the web. Macs can get viruses. Being Unix-based, by default Macs protect the user from him/herself better than Windows. Nothing is immune to viruses though.
funkyworms is offline   Reply With Quote
Old 01-19-2011, 01:46 AM   #225
funkyworms
Pooh-Bah
 
funkyworms's Avatar
 
Join Date: Jun 2004
Posts: 4,249
Re: Computer Security for Poker Players (videos)

Quote:
Originally Posted by RedDog2011 View Post
How about NIS2009? It seems to do everything is needed in order to be protected.
It does anyway slowing down the CPU...
I'm not sure what your last sentence means. I recommend Avira. It has proven itself time and time again to me. It's free and stays out of your way. I have addressed other AV products previously in this thread. I won't be addressing them further.
funkyworms is offline   Reply With Quote

Reply
      

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Forum Jump


All times are GMT -4. The time now is 02:44 AM.


Powered by vBulletin®
Copyright ©2000 - 2017, Jelsoft Enterprises Ltd.
Search Engine Optimisation provided by DragonByte SEO v2.0.33 (Pro) - vBulletin Mods & Addons Copyright © 2017 DragonByte Technologies Ltd.
Copyright ę 2008-2010, Two Plus Two Interactive
 
 
Poker Players - Streaming Live Online