Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

If a Linux user need use his bank account from Internet, then what technologies and procedures should use?

  1. Is better to use the Guest Account (if exist) of the OS, or an Administrator Account?
  2. What web browser is highly recommended?
  3. Should the user clean the browser history or it isn't useful?
  4. Some specific port should be closed? (I'm developing with PHP so I have the port 80 opened for Apache)
  5. There are some plugins or configurations that must be enabled/disabled?
  6. Any software or method that could help to improve the security?
  7. The Tor browser + Vidalia is a good or a bad alternative?
share|improve this question

closed as not a real question by Polynomial, Iszi, Jeff Ferland Dec 17 '12 at 19:11

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

add comment

2 Answers 2

To answer your specific questions

  1. Never use the root account, always use a normal user account
  2. An up to date, patched one
  3. Generally considered a good idea, but good online banking applications should enforce no memorisation of passwords etc
  4. This doesn't mean anything in this context - what do you mean by port and closed here?
  5. Any plugin could increase the attack surface of your machine, but generally NoScript and similar tools are useful at reducing risk
  6. Use antivirus; use a firewall; use sensible browsing practices
share|improve this answer
1  
AFAIK there are no anti-virus products which detect Linux viruses (IIRC, not counting android, there's about 4 such viruses reported in the world) there are AV products which run onlinux and detect MSWindows viruses - but that's another story. You should however run a rootkit detector and keep your patches up to date (and if you're very concerned about security a host-based IDS) –  symcbean Dec 17 '12 at 15:11
    
@symcbean There are a number of Linux anti-virus products on the market, both free and commercial. Do a quick Google search on Linux antivirus and you'll be rewarded with plenty of options. –  Xander Dec 17 '12 at 20:06
1  
@Xander: Like? Please read my comment above: "there are AV products which run on linux and detect MSWindows viruses - but that's another story" –  symcbean Dec 18 '12 at 9:17
    
@symcbean - You're absolutely right. I'm not sure what happened there. I don't know how I misread your comment that badly. –  Xander Jan 31 '13 at 21:40
add comment
  1. When using a computer you always want to use the least privileged account. This means a non-administrator should be used for web browsing.
  2. I would recommend Chrome because it allows plugins to be disabled at the browser level, and only enabled as they are needed and accepted by the user. Never-the-less as long as you use an updated mainstream browser you shouldn't have any issues.
  3. Yes, you can do this if you want to be secure. There are also browser modes, such as incognito mode in Chrome, which shouldn't save any local information. If you start delving into forensics you can find that this isn't always true, but from what I've found Chrome does a better job than most at this. If you want to pull out all the stops, I recommend reviewing this browser security review.
  4. General best practices say a computer should only listen on the minimum ports required. As a desktop this is an extremely small amount of ports and I'm not entirely sure what this question is asking in this context?
  5. As mentioned before, you should disable all plugins and only enable as needed. In addition Chrome has an add-on called NotScripts which will additionally secure your machine.
  6. There are a lot of different types of software that could help secure your machine. In a consumer context, you are probably okay with AV, a software firewall, and strong password management. However, in more complex environments you should consider HIDS, Anti-Virus, software firewalls, strong password management (password vaults, etc.), Data Loss Prevention agents, Patch auditing agents, etc.
share|improve this answer
    
Thanks, your published document is interesting and very useful. –  Lucio Dec 17 '12 at 14:43
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.