I know a lot of people run different security applications on their laptops/desktops. I use Little Snitch on my Macbook Pro. I like to know where my applications are sending data and where I am receiving data from.

What are some of your security applications that you guys run on real-time to protect your computer?

  • 4
    I'm slightly confused. Your question text seems to be generically asking about "security applications" but you've tagged the question specifically with "firewalls" and "network-scanners". Are you uninterested in antivirus/anti-malware tools, sandboxes, or any of the other useful types of real-time protection utilities? – Iszi Apr 19 '11 at 18:04
  • 1
    What are you trying to prevent? Data on a lost laptop? Don't want to become a spambot zombie? – Marcin May 12 '11 at 1:07

You mean in the background as a service?

  • Nothing. Bogs down the system for no useful result.
  • Yes, I mean in the background as a service. Pretty much how Little Snitch works. – user2145 Apr 19 '11 at 17:08
  • Kernels are for Sucka's, An't nothing background about my system. – rook Apr 20 '11 at 1:31
  • Microsoft Security Essentials
  • KeePass
  • TrueCrypt

Currently I run, on my personal laptop, these active security tools:

  • eljefe (client) - Basically a client that reports processes information to the eljefe server (truthfully the tool is very cludgy and i'm only running it because i'm testin it out)
  • Microsoft Security Essentials
  • Windows 7 Firewall
  • PeerGuardian
  • Tor
  • Also, all logging/auditing is enabled for windows and the firewall

Currently I run, on my personal desktop, these active security tools:

Additionally, i'll use the built in tools as well as Truecrypt, keepass, glary's utilities, and some other odds and ends of clean-up tools (For some reason I'm obsessed with cleaning the white-space of my laptop and desktop). As for anti-malware I use Malwarebytes (along with Windows Security Essentials as i listed above).

Alright, these are for common use...... if i'm doing sec auditing/vuln assessment I'll boot into either an XP partition with some tools which has practically no defenses or a live CD/USB (ie BackTrack).

Is this really the type of response you were looking for, or is there something else you're going after?

If you'd like some more specific ideas, please post them. It seems like you're an apple user, and that's a whole different beast to tame.



With these addons:

noscript (Love the anti-xss and anti-csrf features)
FireSheep (Too easy)
AdBlock Plus
https-everywhere (EFF)
Tor-Button (EFF)
  • BTW, FireSheep will not work on atheros wireless chipsets, which made me quite mad when i realized that the "cool" session hijacking tool that i heard about in class didn't work on my laptop... which happens to be beautiful for every other wireless tool I've tried. Not too much of a loss. – Ormis Apr 19 '11 at 20:09
  • 1
    How's FireSheep a security (defense) application? I would think BlackSheep would make the list instead? Then again, it seems the OP didn't specify (another thing) whether he wanted defensive/offensive or black-hat/white-hat tools. (Though, technically requests for black-hat tools are off-topic here.) – Iszi Apr 19 '11 at 20:16
  • @Iszi yeah few on there are for defense, like adblock. But the majority are pen-testing tools. – rook Apr 19 '11 at 21:24
  • All of these plugins are amazing. – user2213 May 12 '11 at 11:09
  • Certificate Patrol is useful also, for identifying if the traffic you thought was secure is actually being proxied. – bobmcn May 12 '11 at 14:52