Table of Contents

personal IT security for health professionals

see also:

introduction

basic rules

ALWAYS show file extensions

avoid being phished or quished

backup to at least 2 separate devices

protect and encrypt data

physically secure devices

enable two-factor security for accounts

portable mobile devices

  • DO NOT throw out smartphones / laptops / etc into e-waste unless you have deleted important apps such as banking apps, deleted email accounts on the phone, and reset the phone to factory settings
    • if you can remove the hard drive from a device, do so and physically destroy it with a sledge hammer before discarding, or, as a minimum, erase it using special secure erase software (normal erasing or deleting can usually be recovered by hackers)
  • If you want ultimate control of your phone and the best privacy and perhaps best security - consider a Google Pixel phone and change it to use Graphene OS
    • this is relatively easy to do as long as the phone is not locked to a provider
    • once Graphene is installed you can access most if not all Android apps and none of the Google tracking will be on there unless you put it on there
    • best of all, you can create multiple user accounts which are all sandboxed, so you could have one account in which Google Play store is enabled, and a separate account for all your banking and 2 factor authentication while the main account has neither of these so if your phone gets stolen, it is that much harder for the thieves to access your bank accounts
    • this will not be possible on a Samsung phone or an iPhone

iPhone and iPad

  • anyone with forensic software such as Elcomsoft iOS forensic toolkit / Elcomsoft Phone Password Breaker (EPPB) / Oxygen / Cellebrite can get past your iPhone/iPad password if they have your iPhone or iPad
  • hackers can also use tools such as iBrute to hack your iCloud account password and download your entire backup onto their iPhone
  • NOTHING on the internet is totally secure!!!

laptop and desktop computers

  • securing your Windows 10 computer for when it will no longer be supported after Oct 2025
    • make a Windows 10 install USB drive (as below) in case you need to re-install - MS probably won't be hosting this access after Oct
    • in Windows Security:
      • ensure enable Tamper Protection is turned on
      • consider enabling Ransomware Protection for various document folders which may be important to you BUT I probably wouldn't do this as it may have adverse effects (and you should just regularly back these up)
      • in Firewall, block inbound connections for each profile - public, private
    • in Windows Features:
      • ensure SMB 1.0 File Sharing is turned off
      • ensure Telnet client is turned off
      • ensure TFTP client is turned off
    • in Windows System Remote settings
      • ensure Allow Remote Assistance is turned off
    • change some Registry settings to further protect your system
      • add NoAutorun to Exporer policies so malicious software on a USB drive wont automatically run when it is inserted
      • set Enable to false (0) in WindowsScriptHost settings to turn off running scripts
    • in Powershell:
      • run Set-ExecutionPolicy AllSigned then Y to ensure any file is signed properly before allowing it to run
    • remove obsolete software such as Adobe Flash or old Java
    • ensure your software is up to date
    • never hide file extensions in the explorer view - helps avoid social engineering exploits
    • never allow windows to automatically install printers or devices it finds on the network - helps avoiding Internet-Of-Things devices to be hacked and presented as “printers” to your computer to trigger unwanted behaviors.
  • alternatively, you can install Windows 11 even though Microsoft says your computer is not compatible:
    • only do this if your Windows 10 machine runs fast as Windows 11 may be even slower, and ensure you have backed up all your data before doing this
    • see https://www.youtube.com/watch?v=C_p3dBrr_Sg which uses the FlyBy11 tool to install “Windows Server” which doesn't do all the “incompatibility checks”

create flash drives to help repair your PC if it crashes BEFORE it crashes

backing up Windows PC

encrypting disk drives

MS Windows computers

MS BitLocker software

VeraCrypt

  • as of May 2014, True Crypt is no longer maintained and thus is no longer secure, however, Vera Crypt has taken this on and provides a new and backwardly compatible system
  • see http://truecrypt.sourceforge.net/ on how to convert existing TrueCrypt volumes to BitLocker volumes

Vera Crypt:

warning - possible data loss
removing Vera Crypt encryption

MS EFS folder encryption

external portable hard drives