Ok Funky sorry for all the questions. I installed Tomato and it went fine. I set my router password. Like I said all the setting and features with Tomato are overwhelming and to be honest I don't know what any of them do, so just to be clear I don't have to change anything else to be secure. Just the password and the wireless security. That's it. Thanks you again

Also. I have wireless disabled for now, but in the wireless section is the "shared key" the password? And next to that there is drop down list with TKIP,AES, TKIP/AES in it. Which should I be using?

I checked the Firewall section and none of the boxes in that section are checked. Is that how it should be?

Sandboxie was already mentioned, but I want to reiterate how awesome it is.

Basically, when you run programs, everything that is normally written to the registry/disk/etc is instead written to a separate "sandboxed" directory.

It's sort of like running a virtual machine and then resetting it every time to guarantee a clean install.

It's basically impossible to get infected by drive-by malware this way.

It's only around 500kb, and doesn't seem to have any negative performance impact.

I'm totally sold on it. (and it's free!)

http://www.sandboxie.com/

Does anyone know a password manager that works is easily portable. I move back and forth between my laptop and desktop all the time and have a dozen or so important passwords. I don't want to rely on a thumbdrive. A lot of the time I am on the same network so I can sync a central database really easily.

Use Keepass.

Keep your master copy on the network share and then sync it with the laptop and desktop. That way if you take either computer off of the network you'll still have access to your passwords.

I haven't watched any of these, but will do so now. I just want to thank you for doing this.

I wonder what a site like Deucescracked would be willing to pay you for making a series like that over there...

is something i wrote up too. much of it is from this video, and other random security stuff i read up over the place. the extra stuff it mentions is:

- the importance of not letting your ip address be known to people you dont neccessarily trust. (2p2 mods, people you speak to on skype, people on the same network as you in your house - shared internet connections in vegas) and talks about how remote attacks are possible to compromise your machine, which aren't just reliant on your running dodgy attatchments.

I use Keepass + Sugarsync to automatically sync it to the web to share between computers.

yes, I worry about my mother stealing my identity too

every single packet you send anywhere contains your IP address

Hello funkyworms,

I have been watching your security videos, and have added the router you have suggested. Also, I updated the firmware to Tomato.

How do you feel about Untangle for Windows? Using this software, you would not need a dedicated server.

Unfortunately Untangle for Windows (U4W) does not offer protection for its host machine. So installing U4W on your poker machine is pointless. It could even have negative effects due to the high load the U4W virtual machine will put on the system.

U4W is only a viable option if you have a hard-wired non-poker machine to dedicate to it.

Thank you for the quick reply.

Will you be doing any You Tube videos on how to set up Untangle with a dedicated server, or know of a good reference source?

Rollo

I have been using Passpack for my passwords. It's internet based, which might make some people uncomfortable, but it has the advantage that you don't need to carry any thing with you. They do however offer as an option the ability to use two factor authentication if you want to carry something with you (a Yubikey).

Anyway, thoughts about Passpack?

How should a network look like, if I want to use a gateway with Untangle?
Does this look reasonable?
[Untangle/gateway/router/PPPoE]---->[Tomato/router/bridge]---->[poker-pc]
[Untangle/gateway/router/PPPoE]---->[Tomato/router/bridge]---->[network-printer]
[Untangle/gateway/router/PPPoE]---->[Tomato/router/bridge]---->[gaming-pc]

And can I still use DHCP for my LAN?
If I can still use DHCP, do I have to configure it on the gateway or on the router?

Or I am totally wrong ?
If I am totally wrong, you have to do another tutorial thread on how to configure a safe network.


PS: Sorry for my poor english. I am not a native speaker.

Yes you can still use DHCP with the Untangle setup. The Untangle box will handle the routing, NAT, DHCP, DNS, firewall, etc. The Tomato box will just be a switch and a wireless access point. DHCP should be disabled on the Tomato box.

I have never used one of the online password managers. They seem like a good idea if you are always using different computers. Just always be careful when accessing sensitive information from an untrusted machine.

So awesome. Nice work man. I can't believe most of your vids only have a few hundred hits. Every poker player should do this IMO.

Thanks a lot.

What if you have a mobile phone that you like to check email from and/or visit sites that require you to log in?

What would be the best way to go about it since it will store you passwords?

Is it better to just go with out this and only do these things from your computer?

Is keepass actually safer if you already have a complicated password or is it for people who have trouble memorizing passwords and they just copy and paste which is vulnerable to keyloggers?

I know the Blackberry Bold has a built-in password manager. There is also a keepass-like product currently being developed for the iPhone called iKeepass.

The main benefit of keepass is that it allows you to have strong and unique passwords for each account. Having a complicated password is good but the benefits are negated if you're using the same password for all of your sensitive accounts.

big thx man!

U rule funky. Thanks heaps for this thread, wish id checked it out b4 i bought AVG!!

1password is also an iPhone app for passwords that integrates really well with a native Mac version.

How do you like sugarsync?
Does it hog a lot of resources?
How do you think it fares against LiveMesh?

@funkyworms,

What are your thoughts on the relative safety of Virtual Machines?

For example, I am running Linux as the host OS and Vista as the guest OS in Sun's VirtualBox. The only thing I run in the VBox environment is the Poker Stars client. Does this protect me from keyloggers? It seems to protect me from malware and viruses in the host OS.