Intrusion prevention
Make it less easy for hackers or anyone with physical access to your
computer to get in:
- Lock the BIOS (with a password) so that you can only boot from C:
- Use passwords ALWAYS and make the difficult to guess. There
are good password crackers out there.
- Don't rely on encryption. Remove private files to floppy and store
them physically away.
- Don't accept programs or email attachments from "just anywhere". Your
level of security is only as high as the origins of your software.
This includes things like word-processors, O/S's, etc.
- Don't run commands people tell you to via IRC or ICQ.
- Don't give anyone unsupervised access to your computer or account.
- Don't create security holes (like with "xhost +", or by
exporting filesystems using NFS, or by creating NT shares, etc.)
- Run as few services as possible.