If someone has physical access to your computer they can do basically anything they want. You can encrypt your hard drive with something like Truecrypt but that won't prevent someone who has physical access and enough skill/time.

MSE is ok, but I recommend Avira.

You have Keepass and I have Keepass. I have my Keepass set to delay 10 seconds before opening.(File Database settings key transformation) you have yours set to 1 second.

If we swap DB files is your file on my PC going to delay 1 second or ten?

10

i found the solution.. bios password - Always.
also I think you didn't mention anything about disabling NetBIOS under XP. or maybe u did and i missed it. anyways here's a nice link with pics and all and also how to close port 445
http://www.petri.co.il/whats_port_44...2k_xp_2003.htm

If I don't mind spending the extra money, is getting Avira Premium Security Suite (the full thing) ok instead of downloading Avira (free basic) and a bunch of other security programs?

KeePass stopped clearing the clipboard. I haven't changed any setting in KeePass and it was working fine before. The only thing I can think of that I changed is increasing the UAC security level from default to max. Anyone any idea?

try to reinstall it and be sure to backup everything properly

Ok will do. Also, is there a way to set KeePass to not show notes and usernames in the main window? Funkyworms suggested to put the secret question and answer for email accounts in the note field, but now when I log into anything when my roommate is in my room he can just read those off my screen as they're not made dots like the password. And sometimes when coaching someone I show them my screen with teamviewer or so and I really don't wanna risk a ninja print screen from someone I don't know.

Hmm, good point. Couldn't find a way through the options. If you use the default view, I would just input a fake entry and two rows down the real info. If someone takes a ninja screenshot, they would see the fake info. Just a suggestion

EDIT: Ok, I think I got it - go to View > Configure Columns and untick Usernames and Notes

Thank you sir!

I have read through this thread and just have a few things I'd like to ask about:

(I'm using Win7 x32)

1. I use KeePass but also travel around. What's the best policy? Is having a web backup of your .kdbx file secure?

2. I use Firefox, NoScript and Avast on a Standard user account on a home secured network- do I need Anti-Mal or Anti-Spyware too? Is the Windows firewall suficient?

3. I seem to require UAC off for things like SendPlay to work in AHK scripts. But I understand UAC is pretty key for security. If I'm logged in as a Standard user and not Admin, can I get away with UAC off?

4. How often (if at all) should I tell Avast to do system scans, or does it run them frequently behind the scenes?

5. ITT people have said a few times words to the effect of "If you follow practices A,B &C you will NOT get a keylogger..." How actually do keyloggers usually infect a system?

Thanks guys

^ for 2, I realise this is covered in another sticky, but comments in this thread conflict with the information given

1. Best policy is not a simple thing to define. You should never login from a computer other than your own. Yes it's safe to store your db on the web.

2. Running an mbam scan every once in a while won't hurt anything.

3. This stuff can work with UAC on.

4. This is up to you. It's always going to be scanning on-access.

5. Pirated software and browser exploits are probably the 2 most common ways. Don't worry about keyloggers too much. They get way too much attention here. The biggest concern is weak password management.

How likely are u to be hacked on a mac compared toa windows based computer?

Thanks funkyworms

1. But if I'm not prepared to login from any computer other than my own, I'm not really that mobile. Are internet cafes across the world just to be avoided? Hotel and other public wifis?

3. On the ahk forums they've suggested this can't be done: http://www.autohotkey.com/forum/viewtopic.php?t=67811
I would be very interested to learn of a work around you have.

I got a dedicated e-mail for Stars and FTP (RSA token on both sites) and using e-mail to login at FTP, how is it possible for him to get a hold of my e-mail? Will I get the error if he tries my SN?

Thoughts on Avast funkyworm?

Is all this information relevant for mac computers aswell?? If not is the likelihood of getting hacked more or less for a mac??

Yes it is relevant for Macs. Your likelihood of getting hacked is based almost entirely on your behavior, not on your operating system.

Really good stuff funkyworms.

Is there an N-Wireless router that you would recommend, or is a Tomato-WRT still best due to the flexibility and stability?

the first step to computer/system security is physical security. lock your computer when you're away. lock your door. hide yo kids, hide yo wife, etc.

Very usefull!!! Thx

If you use Truecrypt and your OS crashes can you recover data?

Yes. You can do this with the Truecrypt rescue disk.