I have a few more suggestions which may help. I'm a bit paranoid when it comes to online security, so this may seem a little excessive.
1. Don't use the same password for accounts which are important to you.
Your email addresses, Paypal accounts, bank accounts, etc. should have different passwords. Thus, if your computer isn't infected and if one of your accounts is compromised, your attacker will have a harder time to getting into your other accounts.
2. Always log out of your account when you are done.
Crackers (those who hack to destroy/infect/steal) are pretty creative in creating malware. They've found ways of copying your web browser cookies when you visit their website. This may not seem like a big deal, but most websites depend on cookies to keep track of your login status. So you should log out of your account when you are done to clear the login cookie. You can also clear your cookies manually if that makes you feel safer.
Once the crackers have your login cookie, they can try to steal your account by using that cookie to log into your account and change your password. They can't guess your password using the cookie, but they can use it as a kind of "ticket" (like a movie ticket) to access your account.
Generally, I avoid logging into multiple accounts on one web browser. If I have to log into two accounts at the same time, I use a different web browser for each account. Firefox gets the less trustworthy websites. Chrome, Opera, and Safari get the more trusted websites. I don't use Internet Explorer unless I really need to.
3. Use a "reputation" website to check a site's trustworthyness.
There are some online websites that scan websites to make sure they are not distributing malware. The two I use to check are:
McAfee's SiteAdvisor and
Norton's Safe Web.
These are not foolproof , but they can help. I checked Dokuga on these sites before creating my account here.
4. Disable Javascript for your web browser.
This will suck if the website depends on Javascript, but if I don't trust the website, I really won't care if the website is not functional. It's up to the website owner to figure out what to do if a visitor disables Javascript.
A way around this is to use Firefox and install the
NoScript add-on. You can then selectively choose when to enable Javascript. For the longest time I would not enable Javascript on Dokuga, and I was able to read all fanfiction just fine. (Just not create a new account.)
5. Avoid using Adobe's PDF Reader (Acrobat) in your web browser.
Unfortunately, there are malicious PDF files out there created solely to infect your computer, and Adobe hasn't done a good job of keeping their plugin and their software free of security problems. Consider using an alternate PDF viewer like
SumatraPDF (free and opensource) or
Foxit Reader (free, but commercial product like Acrobat).
I prefer to download the PDF file first, scan it with my antivirus software, and then view the PDF file on my computer via SumatraPDF.
6. Block Flash.
There are Flash files designed to infect your computer. Unless you trust the website (like YouTube.com), I'd avoid visiting it. Alternatively you can avoid installing the Flash plugin from Adobe or, if you use Firefox, install an add-on that blocks Flash.
NoScript does this. So does
Flashblock.
I use Firefox as my main web browser, whether I am on a PC or a Mac. I always install the following add-ons for security reasons (in this order):
- Adblock Plus
- NoScript
- Flashblock
I do have the Flash plugin installed, but I don't have the PDF plugin. Both NoScript and Flashblock block Flash, but sometimes I only want to enable Javascript, but not Flash. Having both lets me do this quite nicely.
Hope this helps.