Don't run as admin (durr)

[chazzy2501]

Though I'd share this clip about critical Windows vulnerabilities and running as a standard user.

 

 

100% IE Vulnerabilities mitigated (in 2013) when running as a standard user!

[dany2010]

A good vid there. As he says a lot of people use admin accounts for convenience.

My manager does and I never touch his machine because I don't trust it.

The worry is, being logged in as a domain admin opens up the entire network. Just type \\domain.name in and see what comes up.

 

Sometimes I roll with a local admin, and this is what any part time technicians can ever access here.

[Arthur]

This is the report Steve is talking about...

 

http://blog.avecto.com/2014/02/the-simple-way-to-mitigate-over-90-critical-microsoft-vulnerabilities (PDF)

 

Another interesting stat is that 91% of web exploits target Java.

 

www.cisco.com/web/offers/lp/2014-annual-security-report

[mac_shinobi]

 

Another interesting stat is that 91% of web exploits target Java.

 

www.cisco.com/web/offers/lp/2014-annual-security-report

 

Even after the latest java update which gives you the application is blocked prompt unless the site is in its white list. Unless the malware can auto add itself to that list and then execute the malicious code ??

[Arthur]

Even after the latest java update

The Java plugin has more holes than Swiss cheese, so I reckon it would still be possible to get it to execute malicious code.