] I am regularly asked what average Internet users can do
] to ensure their security. My first answer is usually,
] "Nothing--you're screwed."
]
] But that's not true, and the reality is more complicated.
] You're screwed if you do nothing to protect yourself, but
] there are many things you can do to increase your
] security on the Internet.
]
] Two years ago, I published a list of PC security
] recommendations. The idea was to give home users concrete
] actions they could take to improve security. This is an
] update of that list: a dozen things you can do to improve
] your security.

Good advice, ranging from "back up regularly" to "don't type your password into a non-SSL encrypted webpage" to "don't follow links in unknown Email".

I have my own mantra that I repeat to digitally neophyte relatives and friends who ask me how to make their systems secure. I've lost track of the number of times I've visited a friend's house and listened in horror as they said something like, "I keep getting these weird popups and my computer runs really slow sometimes, and no, I don't use anti-virus software or anything... Can you help?" At which point I either tell them to do the following, or I push them aside and do it myself if I'm feeling particularly generous with my time:

(1) Download a free anti-virus program and run it. For example, AVG is highly recommended, and can be obtained at http://www.grisoft.com/us/us_avg_new_free_edition.php

(2) Check for operating system updates: http://windowsupdate.microsoft.com

(3) Download the free program "ad aware" and run it: http://www.lavasoftusa.com/support/download/

(4) Download and run some free anti-spy-software like "Spybot S&D": http://www.safer-networking.org/en/download/index.html

Run all of the above, and then when done, go back and do them all again. Then if things still feel gooey: lather, rinse, repeat, until the warning messages stop.

Of course I can also lecture the friend about not opening email attachments, and making regular backups, etc. etc., which they may or may not do. But at least the above steps can address the vast majority of messes that most folks run into.

- Elonka

Schneier on Security: Safe Personal Computing