Privacy and IT security for personal computers

Knowledge of the possible hazards and their prevention are the best protection.

General Information on IT security, see e.g. Securtity Pages of CERN. Please read through everything there quietly - the problems and their solutions are from those in HZB not very different. Privately, you will benefit from this knowledge.

PC users may also read the CERN recommendations for good work with the PC.

The PCs on the HZB network can be used by anyone with a valid ID HZB. They are also a worthwhile destination for a spying with the help of malicious software (Trojans). On Windows PCs, the files and settings stored locally on the PC, with Linux PCs on central servers at the FM-D in the home directory of the user.

To keep the files confidential, they must be protected against unwanted access. Please remember, that files stored outside the network HZB can be accessed by a third party without your consent! The following are the methods of protection and their use on Windows or Linux / Unix / MacOS systems are described in HZB.

How to enchance security on your PC

All systems

• Use the services of the HZB.
• Use only the latest software versions.Do you play a security update, if that does not happen automatically.
• Use a web browser add-on to block scripts, such as NoScript for Firefox, video about it (Also prevents advertising).
• Avoid clicking links in e-mails. You might reveal more than you'd like.
• Open no e-mail attachments or links in unsolicited e-mails. Do not open or run these files even after you have saved it.
• Use webmail on suspicious shipments, please do not open any links here, too.    
• Never resend suspicious attachments or e-mails to anyone. Not even us!
• Please do not lapse into panic. Despite the many attempts dangerous e-mails are rare relative to the usual spam.
• Do not use cloud services like Dropbox, Google etc. for file storage.

Windows

• Keep your programs current with the Windows Update system.
• Avoid local shares. Use the group directories, the network clipboard or iFolder on the central servers. Here also check the access rights!
• Put your files locally on the PC only in My Documents. This directory is set up with a centralized policy (a rule in the Active Directory) on the D drive.
• Check the rights to this directory using Windows Explorer by right-clicking the folder and select Properties, then select the Security tab there. The rights are inherited by all files in that directory. Default access is prohibited for all except the owner.
• Check the permissions of files in the shares with Windows Explorer and correct them if necessary.