An open community 
of Macintosh users,
for Macintosh users.

FineTunedMac Dashboard widget now available! Download Here

Topic Options
#16320 - 06/26/11 09:15 PM How to prevent Botnets from recruiting my Mac?
JoBoy Offline


Registered: 08/05/09
How do you guard against a botnet planting a bot on your computer and using you as a distribution platform for spam, etc.?
_________________________
Mac Pro dual Quad-Core Intel Xeons Early 2008; 16GB RAM; MacOS X 10.11.6, iOS 9.3.5

Top
#16324 - 06/27/11 07:22 AM Re: How to prevent Botnets from recruiting my Mac? [Re: JoBoy]
joemikeb Online
Moderator

Registered: 08/04/09
Loc: Fort Worth, Texas
Tacit is the real expert on this, but I will start the ball rolling with the following:
  1. The greatest threat to your Mac's security is sitting in front of the monitor and keyboard —ie. you
  2. Be sure you have a good account password, at least 8 characters, numbers and mixed case letters, no word that is in the dictionary
  3. Use the same rules for all internet accounts and use different passwords for each internet account
  4. In your browser preferences, turn off any option to automatically open "safe" files on download
  5. Any time a web site indicates you need to download something to "better view this site" treat that site and anything on that site as if it is a malware bomb ready to go off at the slightest touch
  6. If you ever get a popup or popunder or any other unexpected warning that your computer may be infected by a virus and/or offering to "test" your computer for malware the test is guaranteed to be a false warning and the test itself is malware.
  7. Only download software from sites you navigate to and you know to be reputable
  8. Do not download any pirated software
  9. Remember any offer that sounds too good to be true is almost certainly too good to be true
  10. Install a good antivirus software package, but remember this:
    1. Much of today's malware is either undetectable by virus checkers or disables the AV software befor it can warn you of the danger
    2. In spite of the claims of some AV vendors, no AV software can detect a virus until the virus has been recognized and its signature added to the signature database used by your software
    3. Trojans, scareware, etc.. that are the primary danger on the Mac are installed by the user and are considered applications by AV software therefore not reported
  11. Store all security information on all your devices in a secure password protected application. Prefereably one that you can synchronize between your computer, iPhone, iPad, iPod, etc. There are several on the market. Two I have used, "Password Wallet" and "Datavault Password Manager" (and others) are available through the APP Store.
  12. Perhaps most important of all — keep OS X up to date and immediately install any and all security updates
I am sure others will chime in with additional suggestions


Edited by joemikeb (06/27/11 07:23 AM)
Edit Reason: correct typo
_________________________
joemikeb • moderator

Top
#16328 - 06/27/11 09:29 AM Re: How to prevent Botnets from recruiting my Mac? [Re: joemikeb]
JoBoy Offline


Registered: 08/05/09
Great advice!!! Thank you.

What about Apple's built-in Keychain as a place to store security information? I thought that was its purpose.
_________________________
Mac Pro dual Quad-Core Intel Xeons Early 2008; 16GB RAM; MacOS X 10.11.6, iOS 9.3.5

Top
#16330 - 06/27/11 12:46 PM Re: How to prevent Botnets from recruiting my Mac? [Re: JoBoy]
joemikeb Online
Moderator

Registered: 08/04/09
Loc: Fort Worth, Texas
Keychain works fine on the Mac, but it is not transportable to other Apple iDevices. crazy
_________________________
joemikeb • moderator

Top
#16332 - 06/27/11 02:32 PM Re: How to prevent Botnets from recruiting my Mac? [Re: JoBoy]
ganbustein Offline


Registered: 08/04/09
Originally Posted By: JoBoy
What about Apple's built-in Keychain as a place to store security information? I thought that was its purpose.

That is what it's for, but the stuff you put in it is only as safe as its password. See my post on another forum discussing what you need to do to keep your keychain secure.

Top
#16342 - 06/28/11 07:26 AM Re: How to prevent Botnets from recruiting my Mac? [Re: ganbustein]
joemikeb Online
Moderator

Registered: 08/04/09
Loc: Fort Worth, Texas
Originally Posted By: gangbustein
That is what it's for, but the stuff you put in it is only as safe as its password

See item 2 in my previous list of suggestions. The only reason it is number 2 is because the first responsiblity for security can only be with the user.
_________________________
joemikeb • moderator

Top

Moderator:  alternaut, dianne, MacManiac