Ask HN: How do you trust that your personal machine is not compromised? • Hacker News Board

Re: Ask HN: How do you trust that your personal machine is not compromised?

#21

Post by greggyb » Sun, Jan 15, 2023, 1:08 PM UTC

amelius wrote: post #20

gnfargbl wrote: post #9

Here's a short, fairly practical guide that you might find helpful: https://www.ncsc.gov.uk/files/Cyber-Essentials-Requirements-... . It is aimed mostly at small businesses, but I find a lot of the guidance to be pretty relevant to my personal IT. My even shorter (and incomplete) summary of the document would be: configure your router and firewall; remove default passwords and crapware from your devices; use a lock s…

Do you lock your computer every time you leave your desk? And do you always check for keylogger thumbdrives and such?

Yes. Why wouldn't you?

Re: Ask HN: How do you trust that your personal machine is not compromised?

#22

Post by progval » Sun, Jan 15, 2023, 1:08 PM UTC

codetrotter wrote: post #5

Noone has drained my crypto from my wallets yet. So either my personal machine is not compromised, or they think the amount of crypto in the wallets is too low. Jokes on them though, cause I am moving my crypto to a hardware wallet eventually

Joke's on you, you just told them they should hurry up before you do ;)

Re: Ask HN: How do you trust that your personal machine is not compromised?

#23

Post by twaw » Sun, Jan 15, 2023, 1:09 PM UTC

baobabKoodaa wrote: post #4

treebeard901 wrote: post #2

You should assume all devices are compromised

Not helpful

Why not? It still possible to communicate securely using compromised devices and networks.

Re: Ask HN: How do you trust that your personal machine is not compromised?

#24

Post by cube2222 » Sun, Jan 15, 2023, 1:11 PM UTC

I try to follow what others already mentioned, but still, for any personal high-security stuff I use a device whose OS puts strong limits on apps, like an iPad.

Re: Ask HN: How do you trust that your personal machine is not compromised?

#25

Post by jl6 » Sun, Jan 15, 2023, 1:14 PM UTC

NikolaNovak wrote: post #16

Great question. I don't anymore. Decades ago when I had a 286 and knew what each file did and what all the software was, and threats were limited and crude, I had good confidence of controlling my machine. Today, when my laptop has millions of files and each website - even hacker news - could inject something malicious and my surface is so broad (browsers applications extensions libraries everything) and virtually an…

On the backup question, this is one reason why I have a set of backups that are physically disconnected and not automated.

Re: Ask HN: How do you trust that your personal machine is not compromised?

#26

Post by albntomat0 » Sun, Jan 15, 2023, 1:16 PM UTC

The biggest thing is being deliberate about your threat model. Who would want to get onto your systems, and how much do they care about you in particular?

From there, take appropriate actions. For the vast, vast majority of us, that means using good passwords, updating software, and not running weird things from the internet.

If you’re worried about 0 click RCE in Chrome/Windows/iOS, you either should be getting better advice from folks outside of HN, or are being unrealistic about who is coming after you.

Re: Ask HN: How do you trust that your personal machine is not compromised?

#27

Post by Semaphor » Sun, Jan 15, 2023, 1:17 PM UTC

amelius wrote: post #20

gnfargbl wrote: post #9

Here's a short, fairly practical guide that you might find helpful: https://www.ncsc.gov.uk/files/Cyber-Essentials-Requirements-... . It is aimed mostly at small businesses, but I find a lot of the guidance to be pretty relevant to my personal IT. My even shorter (and incomplete) summary of the document would be: configure your router and firewall; remove default passwords and crapware from your devices; use a lock s…

Do you lock your computer every time you leave your desk? And do you always check for keylogger thumbdrives and such?

For me: No, and no. But as that would require someone breaking into my apartment, I don’t worry too much.

Re: Ask HN: How do you trust that your personal machine is not compromised?

#28

Post by k3liutZu » Sun, Jan 15, 2023, 1:18 PM UTC

amelius wrote: post #20

gnfargbl wrote: post #9

Here's a short, fairly practical guide that you might find helpful: https://www.ncsc.gov.uk/files/Cyber-Essentials-Requirements-... . It is aimed mostly at small businesses, but I find a lot of the guidance to be pretty relevant to my personal IT. My even shorter (and incomplete) summary of the document would be: configure your router and firewall; remove default passwords and crapware from your devices; use a lock s…

Do you lock your computer every time you leave your desk? And do you always check for keylogger thumbdrives and such?

Yes (I don't bother when I'm working from home)

I haven't used a use usb stick in +10 years.

Re: Ask HN: How do you trust that your personal machine is not compromised?

#29

Post by rekrsiv » Sun, Jan 15, 2023, 1:18 PM UTC

You don't. Treat your personal machine(s) as compromised by default and take it from there.

Re: Ask HN: How do you trust that your personal machine is not compromised?

#30

Post by ramraj07 » Sun, Jan 15, 2023, 1:19 PM UTC

There are two levels here: compromised by some national agency vs. compromised by anyone else.

For the former, I don’t assume anything especially since I’m not an American citizen. I still believe with some certainty that my iPhone is safe from the government but not 100%