6. Set up a Virtual Machine

Experiment all you want without putting your rig at risk

Virtual machine (VM) software allows you to run another operating system on top of your existing OS, thereby giving you access to a secondary PC without the costly hardware investment. It does this through a combination of tapping into the host PC’s existing resources, such as the CPU and RAM, and providing its own abstract hardware, such as a virtualized motherboard and videocard.

There are several advantages to setting up a virtual machine, the primary one being the ability to experiment with software without the risk of mucking up your system. Being a beta tester keeps you on the cutting edge of software development, and with a VM installed, you never need to worry about a poorly written program thrashing your pristine installation of Windows. You’re also given the freedom to explore potentially dangerous applications that might be laced with malware. However, there’s a caveat: Some virus strains can now recognize a VM and lay dormant until installed on the host PC, so it’s best to leave any suspicious files on the VM.

A virtual machine works just like a real PC, so if you're having trouble installing Windows (or Linux), go into the VM's BIOS and double-check the boot order.

You can also use a VM to learn a brand-new OS and explore different Linux distributions without the hassle of dual-booting, or to set up a legacy OS, like DOS, for revisiting old games. Maybe you want to test out your programming acumen, or simply have an alternate OS in place for troubleshooting. In short, there are a lot of things you can do with a VM.

For best results, you’ll need a PC with at least a 1GHz processor and 512MB of RAM. You’ll also need a separate license for each OS you plan to install, but you don’t need to pay for VM software. We like Microsoft’s Virtual PC 2007 (free, http://www.microsoft.com/downloads/details.aspx?FamilyID=04D26402-3199-48A3-AFA2-2DC0B40A73B6&displaylang=en) for its easy setup, although it lacks USB support and other features found on VMWare’s Player and Server packages. Microsoft should be putting the final touches on Windows Virtual PC by the time you read this, which will remedy its shortcomings and add a ton of new functionality.

Depending on what you plan to do with your VM, you can allocate more or less RAM from your primary PC. Allocate too much, however, and your PC could become lethargic.

After installing Virtual PC 2007, you’ll need to set up your VM. It’s here where you’ll allocate resources to your VM, and you’ll want to be careful not to go overboard and adversely impact the performance of your main PC. We typically set the amount of RAM to one-quarter the total installed, putting a ceiling at 1GB. When setting up the virtual hard disk, set aside anywhere from 10GB (Linux) to 50GB (Vista) or more, depending on how you plan to use your VM. Once you’re finished, your VM will act like a separate PC, complete with its own BIOS. Put your Windows or Linux installation CD/DVD in your optical drive, start up the VM, and install just as you normally would. Once you’re finished, apply any security updates, just as you would on your main PC, and then start experimenting. If you manage to mess up your VM, simply start the process over from scratch—no harm, no foul!

7. Configure Your Router, the Right Way!

A vulnerable router is an invitation to all sorts of abuse

Your home security is only as strong as its weakest link, and oftentimes that’s the router. Wireless routers have made it possible to share a high-speed Internet connection with multiple PCs without having to run a mess of cables throughout your home, but if you haven’t secured your Wi-Fi connection, you’re inviting anyone into your network that is able to pick up your Wi-Fi signal. The danger goes far beyond just saturating your bandwidth; those leeching off of your Internet connection can intercept data packets and sniff out login information, lift files from your PC, or share copyrighted material over your IP address so if the authorities come knocking, it will be on your door.

To avoid such unpleasantness, you need to lock down your wireless signal. Most router settings can be accessed by typing 192.168.1.1 into your browser (consult your router’s manual if this doesn’t work). You’ll be prompted for a username and password, and unless you’ve already set one up, type admin for both fields (again, this may vary by router).

Once inside your router, look for an Administration tab and enter a more secure password. If your router gives you the option of changing the username, go ahead and do that, too. Next, head over to the Wireless section and put in a unique SSID. Then look for a Wireless Security subheading and select the strongest encryption method your hardware supports, which for most modern builds will be WPA2 (if your hardware supports only WEP, consider upgrading to a more modern router, as WEP is easily cracked). When entering a passphrase for WPA2, use a combination of letters, numbers, and even symbols, and make sure it’s at least eight characters long. Alternately, you can use one of the many passphrase generators found via a Google search. Keep this information handy, as other PCs in your home network will ask for it when attempting to connect for the first time.

The now ironically named Wired Equivalent Privacy (WEP) will only keep casual war drivers at bay. With the right tools, that script kiddie next door can break through WEP and start serving up illegal files through your IP.

If you’re particularly paranoid about stumbling onto a phishing site not already blocked by your browser, you can replace your ISP’s Domain Name System (DNS) servers with OpenDNS (www.opendns.com), a free, ad-supported alternative with added security. Whenever you type in a web address, DNS translates the URL into the actual IP address. OpenDNS’s name servers maintain an actively updated list of known phishing sites, and can recognize common misspellings that could potentially redirect you to a harmful site. To configure your router to use OpenDNS, follow the site’s instructions for whichever make/model router you own.

Above and beyond protection from phishing sites, OpenDNS's Dashboard lets you configure various security settings and filter Internet browsing, like blocking known porn sites.

The last thing standing between you and an Internet-borne attack is a firewall. Most routers come with a built-in hardware firewall, but it’s a good idea to supplement this with a software firewall. Both Windows XP (SP1 and later) and Vista include a software firewall already installed and turned on by default, but if you want to add outbound protection to the mix, you’ll need a third-party solution, like Comodo (free, http://personalfirewall.comodo.com/download_firewall.html) or ZoneAlarm (free, http://www.zonealarm.com/security/en-us/zonealarm-pc-security-free-firewall.htm).