security

I am running windows security on windows 11 21H2, Build 22000.6113, accompanied by Malwarebytes antimalware free.
However, I just read that my ISP and others can view where I go and what I do which is unsettling.
My question is, do most people settle for my coverage or do I have to go a step further such as using Tor or some other way like a VPN?
I do not know if I am capable of taking this next step but I will try to do what is necessary to secure my machine.
Could you please enlighten me about this topic, such as am I secure as is, or should I move further with a security device?

The "security" built into windows is there to stop malware and it will not stop an ISP from seeing what sites their customers are visiting. In all honesty it is unlikely that any ISP would have any wish to monitor in detail any one of it's customers - they have more important things to do

This will only happen when ordered to provide national authorities with specifics on individuals where they are ordered to, normally requiring legal orders

You can improve your security by hiding your IP and encrypting your data using a VPN, this is a system that is not free if you want good protection, so ignore "Free" vpn

If you have a specific reason to protect your data such as commercial information etc then the VPN will protect this data better than an anti Malware system.

It would unlikely to be the ISP looking for this information but others who often have specialist information retrieval systems, these days the majority of malware and hacking is performed by tricking the user into providing their private information directly to criminals by the use of various scams

Maranna said:

I am running windows security on windows 11 21H2, Build 22000.6113, accompanied by Malwarebytes antimalware free.
However, I just read that my ISP and others can view where I go and what I do which is unsettling.
My question is, do most people settle for my coverage or do I have to go a step further such as using Tor or some other way like a VPN?
I do not know if I am capable of taking this next step but I will try to do what is necessary to secure my machine.
Could you please enlighten me about this topic, such as am I secure as is, or should I move further with a security device?

Click to expand...

Of course they can...as has always been the case. They provide you a service, You're damn right they can check it. Realistically though they wont, Its like when i worked at the bank and people would always ask similar things( In context ofc), there isn't a person monitoring you're account 24/7. They would only be interested if you were breaking a law/t and c's

Specifically with my set up, can my ISP see my bank account or sensitive passwords?
If so I need extra protection you suggest but if not then I will leave as is due to my average level.
Thank you for your help.

Most comercial systems - like banks and shops etc will not send passwords in open format but will have their own encryption systems which the ISP would not be able to decrypt so the data is protected, the same applies when you are actually checking your status of accounts etc

Basically the system encrypts the password and sends the encrypted data every time it is needed, the encrypted result is different every time so even if someone intercepted this it would be of no use a second time.


Edit
One thing I omitted is that many bank systems send a burst of multiple encryptions simultaneously and then only use a preset selection of specific changing encryptions from the burst so there are multiple layers

Hi there

@barman58

Banks etc nowadays will usually also have at least a "2-Level" of security system -- I.E before continuing with any sort of online continuation of account activity they will send a code via text or voice mail to a mobile or landline which you have to enter before continuing.

Even if you "Initiate the phone call" calling up say Bank security fraud number they will send the code that you have to enter before continuing the phone conversation -- even on mobile Banking apps.

This at least makes it harder for people to get scammed by the recent one doing the rounds "...Indian or similar voice calls you in almost unintelligeable accent - We're from zzzz Bank's head office -- we notice there's been what looks like a fraud on your account -----
Then they give some bull xxx about two transactions -- usually one from amazon for around 11,000 EUR / GBP / USD etc and another for 300 from another well known company".

If you put the phone down they re-call x number of times so BLOCK the number. Banks don't call you. You can always jinx these scam calls by saying "I think youv'e got the details wrong as I just made a purchase of 75,000 EUR so are you going to refund me 66,000 EUR -- and by the way actually what head office are you calling from".

It's great to wind these scammers up -- BUT NEVER EVER give them any personal details or even confirm your name etc and if you have recordings forward to the police or whoever deals with Internet and Banking fraud in your country. In the UK I think it's the "City of London Police" (not the Met), and in USA it's the FBI / US secret service.

Also these scammers obviously don't have much intelligence -- whose bonkers enough to have anything like 11,000 USD/EUR/GBP in a Bank current account. If you have that sort of cash available there's a load of "better homes" for it.

Passwords are never sent by banks in "Plain Text". Plain text is usually only available if you use public wifi connections and a scammer is "conning people" with a "free public wifi access point" so be careful of those as it's easy for a scammer to set up a "Mobile access point" which looks like a commercial standard free wifi point like some big businesses give out. Then these scammers get in plain text all your keyboard entries.

There's so much paranoia about Virus detection etc these days - especially on Home computers -- however it's basically simple scams that are the real problem and those can't readily be dealt with by any sort of Computer software. Human Brain is the only thing that works currently. Scams have been around ever since the first humans started trading thousands of year ago. Eventually some sort of A.I (Artificial Intelligence) might defend against them but we are a LONG way off that model yet.

Cheers
jimbo

Maranna said:

However, I just read that my ISP and others can view where I go and what I do which is unsettling.

Click to expand...

You can start by setting up and encrypted DNS, that should prevent ISP and others from easily seeing, what exact webpage you are connecting to. VPN is a bit overkill for this purpose, you will be basically sending all your data through 3rd party, so instead of ISP, they could see it. But as long as your connection with webpages is encrypted (https in the address bar instead of http only), no one should be able to access it. Edge allows to force https.

Hi,
https only isn't new for firefox either doubt it will make any difference in ip knowing where you surf.

jimbo45 said:

Also these scammers obviously don't have much intelligence -- whose bonkers enough to have anything like 11,000 USD/EUR/GBP in a Bank current account. If you have that sort of cash available there's a load of "better homes" for it.

Click to expand...

What became of the goal of retiring with a million?

Hi,
Checking accounts earn better interest rates than a normal saving accounts.
Only has a minimum transaction a month is required think 8.

barman58 said:

You can improve your security by hiding your IP and encrypting your data using a VPN, this is a system that is not free if you want good protection, so ignore "Free" vpn

If you have a specific reason to protect your data such as commercial information etc then the VPN will protect this data better than an anti Malware system.

Click to expand...

I have a VPN and set it to use a server 300 miles away. If I goto a website like "what is my IP location", it correctly states I am in that city, but targeted advertising on many websites still advertise for services in my actual location. Like many other posts here, I don't think I have to worry as I am not doing anything wrong, but it seems very hard to fully protect our privacy. If the advertisers can get past the measures we take, the hackers can't be too far behind.