I recently found Sandboxie, a Windows app that creates a sandbox where programs can run without touching your actual OS. When the apps try to write data to your harddrive, it is written to a cache and kept seperate from your real data. This prevents any malware from being installed in your Windows directory, or hijacking any other files. When you’re done using the sandbox, you can choose to recover some files (move them back to your real harddrive) or erase them. It has a lot of powerful configuration options that allow you to do things like:
- Set a whitelist so only specified programs can be launched or access the Internet
- Block any access to sensitive folders (like your taxes)
- Use a secure erasing program to completely delete any left over data
- Set Sandboxie to delete any leftover data after you close all programs.
- Keep your Sandboxie data in a TrueCrypt volume, which ensures any data in the sandbox is encrypted
For example, you could create a sandbox that only allowed FireFox.exe to be started, and only allowed FireFox.exe access to the Internet. If you downloaded any malware, it couldn’t even be started. And once you closed Firefox, the malware would be securely erased (along with your history, cookies, and temp files if you desired).
All of this is done with a fairly low performance hit (unlike running a virtual OS in something like VMware). Sandboxie is free to try, and costs around $30.
If you’re using OpenID, there’s an easy way to use your domain as your OpenID without running any extra scripts/software. With a couple of lines of code you can set your personal domain to redirect to your OpenID (known as OpenID delegation). Then instead of logging in with you.myopenid.com you can use yourdomain.com. According to MyOpenID.com add the following in your <head> tags (after changing yourusername).
<link rel="openid.server" href="http://www.myopenid.com/server" />
<link rel="openid.delegate" href="http://yourusername.myopenid.com/" />
<link rel="openid2.local_id" href="http://yourusername.myopenid.com" />
<link rel="openid2.provider" href="http://www.myopenid.com/server" />
<meta http-equiv="X-XRDS-Location" content="http://www.myopenid.com/xrds?username=yourusername.myopenid.com" />
If you’re using another provider check their docs for the proper server and XRDS URL’s (which isn’t used by all providers). Here are some popular server URLs:
Another advantage of OpenID delegation is that if your OpenID provider goes out of business, you can just change the tags above and your domain will point to the new OpenID.