Slashdot Mirror
Protecting Our Parents' PCs?
Frustrated Son asks: "I assume that many Slashdot readers must serve as the IT staff for their parents. My folks get my old machines and just enough software to be productive. I try to protect my parents from the forces of evil by installing automatic OS updates, virus checkers, spyware blockers, pop-up blockers... But still I find that my parents end up with unwanted applications and dangerous software. What software or strategies do you use to protect your parents' PCs? Is it possible for inexperienced users to surf the net in safety?"
No thanks necessary, it's what I do. :)
(and yes, I know he said PC. I consider this a PC solution.)
What software or strategies do you use to protect your parents' PCs? Is it possible for inexperienced users to surf the net in safety?"
Well, the solution is pretty simple actually. Since OS X does not have the virus/worm issues that Windows has, is easy to use and set-up, does not have the malware issues that Windows has, I purchased iBooks for my mother and my sister to use. They are cheap, quite effective, durable as can be and since they live many hundreds of miles away from me, I am not always having to do tech support over the phone (or video iChat). Quite frankly, I really don't have the time these days to do computer support so this really is the best solution. Additionally, I would much rather spend the time I have to interact with my family on more fulfilling topics than computer support.
Visit Jonesblog and say hello.
I run into the same problem at my college which distributes laptops to all students. I have come up with a motto that has made life easier for a great many people...
"JUST SAY NO!"
No matter what it's asking, just click no. I've never run into a time where this can cause a problem. If it comes back a few times, (do you want to go to this encrypted page), read it. Then if you're really sure, click yes.
Before they were controlling what I should and I shouldn't watch, now I'm controlling what they should and shouldn't download and install.
Ahh, the life cycle.
I start by making their account a 'guest'. If I have to be the IT staff policy #1 is don't install/change anything without asking! Thus 'guest' works well.
I just create a ghost of the system with everything installed and every so often just wipe the computer and reinstall things. Takes a little doing to get the parents trained well enough to save files correctly, but it works well, and every 6 months i sit down for a couple hours and reinstall everything. Maybe over doing it but I dont have to do anything in between except change ink cartridges
30% Troll, 50% Underrated, 10% Interesting
Score:5, Troll
If my Mum ever wanted a computer, I'd set her up with NT4 (SP1), IIS running, no virus scanner or firewall, and her logged in as Administrator. :)
I've mentioned Linux, and how nice it is, and once she became frustrated with Windows, I'm sure she'd agree
Get your own free personal location tracker
No Internet Explorer/Outlook. Do not let them use it under any circumstances. That's where the vast majority of problems from the internet come from. Get them Mozilla, or Firefox/Thunderbird, or Opera, or anything other Internet Explorer and Outlook.
I use VNC to do check ups on my fathers computer a few times a day. This is real usedull because you can check the computer as if you were sitting in front of it in a very short ammount of time; You dont have to stand up and phisicaly be at the computer.
I also installed Mozilla Firebi...fox on his computer so that he does not install anything he really neads.
Remove that blue "e" from the Programs menu, and teach them to click on the little red fox circling the globe. That'll prevent a lot of this from happening...
"Convictions are more dangerous enemies of truth than lies."
How to deal with tech support requests from parents?
That's what my two younger brothers are for! I just had to teach them enough so that I could send my parents to them.
The party of stupid and the party of evil get together and do something both stupid and evil, then call it bipartisan.
No. Plain and simple, no. I once tried to fixed a computer for a friend. He "clicked" on the AOL icon, and claimed his computer was broken. And by clicked, I mean that he picked up the mouse and "clicked" it against the monitor. I was unable to help him due to the excessive laughter I was experiencing and still do when I think of that day.
My mom's pretty clever, and she listens to what I tell her when I talk about computers. So, in addition to using AdAware, AVG Anti-Virus, Zone Alarm and Mozilla (web and mail), she knows enough to install all the WinXP updates ASAP and never, ever believe anything that arrives in her inbox. Thank god my father rarely touches that machine... Oh, and I have VNC installed there, too, for when I need to do some remote administration from 1100 miles away.
Another trick that I find useful in XP is to set them up as a limited user, and encourage them to use it for day-to-day stuff (like in *nix), give them the password for the administrator account, but make sure you stress that it should only be used to install software.
..educate them, just a little bit.
just little things, like DON'T use ie on pron sites. don't install little helper applications they didn't spesifically went on to look for(bonzi buddies&etc - just not using ie puts this down pretty well though).
then lock down the computer from any outside access(firewall) but please, don't make it so that the firewall gets in the way since they will figure out how to disable it if it is very annoying(the whole point of why it was there was to remove annoyances, so if it is set to so aggressive that it really becomes an annoyance with a person who doesn't even understand the "allow connection blabla" dialogs it isn't fulfilling it's purpose).
though, these tips are quite obvious. just get it around into their heads that it is good for _them_ to use something else than ie for almost anything if they don't wish to get popups in the middle of doing some spreadsheets.
world was created 5 seconds before this post as it is.
I actually swapped tech support with a buddy of mine. Its so frustrating trying to tech support your own parental unit machines. So, I tech support his parents, and he tech supports my parents. This has helped a lot in terms of stress and getting annoyed at the "stoopid" questions.
It's not often that users like that legitimately need to install software. Change their account type from "Administrator" or "Power User" to just "User", and they'll be much safer. For when they DO need to legitimately install something, you could let them have the administrator password.
My server
Stop Lying!
I'm a gentoo zealot and I have to say, YOU SIR HAVE GONE TO FAR!
If you don't install it, the first time your parents want to see a Real stream, they'll install it themselves, and have it do all that nasty stuff.
Moral: install everything your parents might ever need and configure it properly. That's what Linux distros do!
I spend hours locking down the box, turning off their permissions, setting up virus and spyware scanners with automatic updates and run-times and admonished them to run Firefox. Took a long time.
They still got infected. I still got calls. LOTS of calls. "Slow!" "Hijacked homepage!" "radioactive monkeys!" etc.
Then I got them a used G4. Works a charm. They're happy, I'm happy, the web is safer for them and from them.
Does narcissism count as a hobby? --Shawn Latimer
While this might not stop the problem, it is useful to load VNC. up on their box so you can remotely clean up things. In a lot of cases parents and children don't live in the same town, so no only do you have this problem, but you may not get to the machine for a while. Assuming they have a reasonable network connection, this can be a lifesaver. And prevents you from getting frustrated while you try to explain to them "....move the mouse to the toolbar"
I would highly suggest Windows 2K/XP, auto updates and all the goodies you suggest, and a good remote desktop package such as TightVNC. Then make sure to keep the administrator password under lock and key, and give them restricted user accounts.
This way they have the ability to use the machine and the installed software, but are not allowed (or rather - simply can't) install any additional software. I thought about doing this with my parent's PC, but realized my sisters would flip out when they realized they wouldn't be able to download the latest file sharing programs. So - if there is any way you can get them to live with such a PC, I would highly suggest it.
Oh - and don't forget to teach them how to keep important data safe (maybe even set up one of those nifty new external backup hard drive devices with backup software), so that if things do go south you can just come over and reload things without any worries of lost data. Just some ideas...
I installed Mozilla Firebird on my parents computer which is also used by my sister.. Installed all the plugin's they could ever use, and so far, the only way unwanted programs pop up on their machine, is when my sister jumps on to internet explorer cause she gets some errors on sites that say "Internet explorer only!!!" Which is bull, cause I know Mozilla will support what they want, but due to crappy scripting on their javascript, it searches for browser names, not capability... So in conclusion, I would suggest using....
Mozilla Firebird for Browsing
Delete ALL Traces of Internet Explorer Icons
Use Lavasoft Ad-Aware Personal Edition
Use ZoneAlarm Personal Edition
Invest a small bit of money into Norton Antivirus
And above all.. Lock all active x stuff from emails if you still have them using Outlook from M$...
Just me
My father has never used the Internet before and has just started browsing EBay for antique glass. I've printed out, in 48-point lettering, "EBay will never ask you for your password by email" and pinned it to the wall next to the PC.
I'm thinking of replicating this for other tricks that some people try to pull.
Rule of thumb: I'll support you for free if you buy a Mac. If you buy a PC, you use the Yellow Pages. Problem solved.
--
$tar -xvf
This includes updating virus protection(AYG, so they don't have to worry about keeping it paid), running windows update, a full defrag, and I make sure their OO.org and mozilla are up to date.
Hakkuna friggin' Matata. :)
You are not the customer.
My mother has actually started taking a few basic computer classes, which have yielded an improvement in her basic usage skills.
My solution was to install Mozilla, set it as the default browser, lock the rest of the box down, etc. and then just lie lie lie when asked why funnyjoke.exe that they got in their email isn't working.
"Sorry, mom, sometimes stuff just isn't compatible with blah blah blah."
"Oh, that webpage isn't working? Yeah, it's probably a problem with their server. Stuff on the Internet isn't always reliable."
Sure, they miss out on a lot of "content," but nothing they can't live without.
Do I feel bad about lying? Yeah, kinda, but it's better than making them feel stupid for Window's design flaws.
Perhaps eventually they'll move on to something better and gain the expertise to avoid these perils themselves, but I'm not going to cram lectures and lessons down their throats. I'm patient enough to let them learn on their own pace.
And like I said, they're really not missing out on anything important so far.
> I want Milfeulle to bake me a cake.
What software or strategies do you use to protect your parents' PCs? Is it possible for inexperienced users to surf the net in safety?
I demoed him my laptop (with Debian). He liked it, so I got rid of WinME that had become riddled with spyware and installed (this was about a year ago) Woody, a GNOME2 backport, a 2.4 kernel, Firebird, Thunderbird, OOo, and Shoreline firewall with rules to deny all incoming connections expect for SSH from my personal machine's MAC address. Never had another problem. In fact, his job issued him a laptop (Compaq w/ XP) that he hardly uses because he finds Debian so much easier. To keep him up to date, I log in remotely and do the apt-get upgrade for the security updates.
I also did something similar for my brother with an old Dell P-II laptop he had with Windows 2000 that kept getting viruses and spyware. Only, since my brother is on the road alot, I taught him how to do the security updates himself.
The number of support calls I get from my family has dropped from one a week to almost none.
Install Mozilla or Firefox ...
Stick with Safari, it comes with Mac OS X, it gets updated automatically like the OS, and frankly will get better support when a company blows it and produces a page that doesn't render correctly. Apple is actually somewhat helpful on that last point when the offending site is somewhat important, say online banking, they may contact the offender. I believe Safari has a built in reporting mechanism for bad pages.
For a while I gave my mom MDK 9.2 (now upgraded to 10) to get used to linux . Then I installed it dualboot. She never touched windows in the 3 months' she's used (linux) it. Sure I've had to add openoffice, mozilla too... but she's never had a problem either.
and only I have the root password: a 56 character password with uppercase, lowercase, numbers and special characters all encrypted with my gpg key.
my mom can get at it, but i've told her I can do everything remotely and she really doesn't care otherwise. no problems, no fuss... no phonecalls at 3am PST when her computer at work or home is on the fritz (she's EST)
fun fun
She doesn't have to learn Linux, no one has to spend $$$ on a Mac, and she can still watch those stupid WMV video clips her friends send her links to.
Chances are your parents already have a Windows PC, just keep it and install the right free apps and you'll be all set.
I simply bought my parents an iBook and visit it every 6 months to make sure their software is up to date (aka Mac OS X 10.3, updates to Safari, etc.)
They have yet to have any major problems with it and my mom is astounded that she is achieving things with her computer that she never thought she could, like organizing her photos and e-mailing them off to friends.
In addition to this, make sure to not set them up as an administrator.
I'm not saying you shouldn't leave them with administrator access, just make sure that it isn't their day-to-day user account.
I am 31 years old, and I beleive I don't say it enough "I apprecieate my parents"
Dad's a Programmer, Mom's an Admin.
It's where I learned it all the first place, I guess it helps having technically savvy parents.
GIRLFRIENDS on the other hand... I just dont let her on the net except to check email, and then I have vigorous virus checks, She knows "under penalty of loosing the laptop" that she is not to open any attachments, She doesnt have any need to get any from the people that work for her(email is only to send information TO them). But I still get the Weekly, "how do I send this email again?" she is about as technically UNsavvy as I am on the other end of the scale.
moo.
"Is it possible for inexperienced users to surf the net in safety?" No! Giving computers to the technically illiterate is like giving firearms to children. Computers were supposed to be tools only for the techno-elite. The good thing about viruses, spyware, pop-ups and spam is that they will eventually cause millions to swear off computers, and again they will be tools for the techno-elite.
How ya like dat?
My parents are both in their late 50s. They do not to computers readily, nor do they learn quickly. But they do learn. I've shown my parents, carefully, the results that happen from each action. Install spyware or adware? The computer is slow. Open unknown attachments? Get a virus. Fail to update Windows/Norton/AdAware, get taken advantage of. By now, they can operate pretty close to self-sufficiency. About once or twice a month I'll get an e-mail or an IM if they want to double-check a course of action with me, but 90% of the time they choose correctly with my input in those cases anyway.
In short, stop underestimating people just because they didn't grow up around personal computers. A little bit of time and help can go a long way.
Cogito ergo sum in Slashdot.
Well, neither of my parents are stupid, so I explain to them what it is I am doing and why.
I implement many of the same things as listed in other posts: Non-admin accounts, Firefox, auto-updating virus checkers etc. The point is that all these are solutions selected based on my product knowledge, what I try to give my parents is a good understanding of the first principals involved.
This has equips them to deal with issues in a timely way, solve their own problems, be empowered over the computer as opposed to being intimidated by it and most importantly, not call me every time something happens, but instead call me to boast about how they solved X, Y or Z.
Dialectician. Archology.
And has for quite some time.
...Rob
The American Dream isn't an SUV and a house in the suburbs; it's Don't Tread On Me.
Nope, no blocking. They make other programs for that purpose.
Why is it that computers remove the common sense of perfectly intelligent people?
I know people who would happliy email their bank details despite the fact that they would not snail mail them to an untrusted source in a million years. Just becuase they don't understand something doesn't mean that they can forget basic sense, so why does it happen so often?
Setting them up with Firefox (or probably any other non-IE browser) is one of the best things you can do to protect them. Additionally, Thunderbird (or another non-Outlook mail client) would probably be a good idea.
Set them up with Spybot S&D to clean up stuff that does get through. If for some reason you haven't yet explained to them about not opening attachments, make sure you do.
I was reluctant to switch my mom away from IE because I was concerned about her having problems with non-IE websites. I installed Firebird on her computer (for my own use) this past X-mas when I was visiting. She asked me what the icon was and I told her it was a browser with pop-up blocking and immediately she was ready to switch. I explained about the possibility of incompatible websites and she didn't hesitate to say "I don't care about that. I'll use that IE for sites like that if I have to."
She's been really happy with Firebird. I feel kind of stupid for worrying that adding a new browser would unnecessarily complicate her life--it did exactly the opposite.
At the risk of people calling me an anti-MS zealot, let me just recommend having them use as little of Microsoft's software as possible. It's just bad news--too many exploits. You can go ahead make the argument that possibly Firefox has holes too that no one has bothered to exploit because of it's smaller marketshare. If that's true, then its smaller marketshare is just one more benefit.
I used to do what the OP did, give my parents old machines and clean them up for them. Up until November this worked OK, probably because they were on dial-up, but it was basically just an email/web access for them. In November, my parents decided to get DSL cause they had a deal where it was only $10 more than dial-up (and they no longer needed a second line, so its actually cheaper).
I kid you not, within 4 hours of getting online with DSL my mother had gotten a serious virus that Anti-virus was saying had infected kernel32.dll. OUCH. I didn't know exactly what had happened, but the computer was basically DOA until a certified geek could get working on it. I was NOT about to walk my parents through the process of formatting a drive and reinstalling the OS over the phone.
The earliest chance I had to look at this problem was when I came back for Christmas. So I told my parents this and suggested that they consider getting a new computer - and I recommended a Mac. My dad was totally against the idea, until he saw those new flat-panel iMacs. Then he actually thought they should get that OVER the eMac, which was much cheaper. =) That's what they came home with.
They took it home, set it up, and didn't once call me for help. They called with some internet setup problems, but it was actually the provider's server being flaky. My mom has been really happy with the new machine. She's talking with family via iChat, has figured out email and web just fine, and is even figuring out things I never really taught her. Just a couple weeks ago, she called asking me if she can burn more songs onto an iTunes CD she created. =) I had only introduced the programs like iTunes to her, but never really showed her how to use them, so this was rather surprising to me.
Anyways, they are much happier with the new machine, and honestly my mother in particular feels empowered by the fact that she can do this stuff. I would recommend that everyone at least consider the option. I know it's a bit more expensive, but chances are they'll get more out of the machine as well.
Regardless of the OS, applications, security features, if your parents aren't very local, try to get them a laptop. Even if they use a monitor, mouse, keyboard and such, it's much easier working on it at home with more resources than in their den.
My Mom's in Hawaii, I'm in AZ. FedEx ground is cheap enough that if it can't be fixed in a 10 minute phone call I'll have her send it to me, get it spruced up, send it back. When she was out for Christmas, she brought it with and I updated things then also.
Next time, if we still go the Windows route, I'd put on XP Pro just for the remote access feature.
"Tell them to buy an iMac. It's especially built for idi-" (long pause) "for mommies and daddies."
I setup a WinXP box and set my parents up as "User". I would suggest using remote administration software like UltraVNC. I actually created little link that says "Something is wrong" and they click on it and it does a reverse connect from their machine (getting around the NAT on their router, no need to open a security risk) and connects to a VNC client in listen mode on my machine.
It's always surprising when a desktop just pops up in a window on my computer, esp when I'm on thehun.net, but there's no mistaking who it is or if there is a problem or not. Thank god they can't see MY screen.
I usually get a phone call 5 seconds later with a message of "sorry it was a mistake" or "yeah, X won't install." where X = Kazaa or some other P2P app.
On the other hand, I'd be interested in hearing what kinds of monitoring (packet sniffing) people do on their parent's machines to make sure they aren't cheating on each other or younger siblings aren't goofing around with Yahoo/AIM/ICQ/ETC. I'm not so much interested in the privacy issues as I am in finding out who "bigcack4u" is on my mom/sister's Yahoo friends list.
Rules of educating someone:
The next site to slashdot will be ready soon, but subscribers can beat the rush and start slashdotting it early!
My parents (not in same household, as me or as each other) ask me about computer stuff sometimes, but do different things with that information.
...), but for the most part, they works well. Cheap laser printer from Samsung, Bang, works.
;))
... he ignores the virus warnings, because none of the several anti-virus programs he's put on seem to fully cleanse his PC. The machine crashes frequently with Windows 98, but he thinks about like I do of Windows XP's required registration stuff. (On another one of his machines, a laptop that came pre-loaded with XP, it asks you to register every time you start up; he's tried to register several times, to no avail. It works fine other than that, though, so it seems less broken than if that part *did* work!) I pointed out to him that this could mean he's sending personal documents all over the internet, that his machine could be a zombie for DoSes, that he's probably spreading viruses to everyone with Windows in his address book. He sort of shrugs and winces, and every few months says "Y'know, maybe you're right and Apple is the way to go ..." Twice a year, he pays some local guy to expunge viruses -- if he'd just save the money from that, he could better justify getting an iBook or Powerbook and not worrying about those things so much. His Compaq laptop (my advice had been "OK, if you're going to get an Intel-type laptop, just make sure to avoid Compaq!" was of course studiously ignored ;)) has had numerous hardware problems, compounded by inadequate repair service and piss-poor customer service. What I should do is tell him "OK, just make sure not to get an Apple ..."
1) When my mom needed a computer for college homework, around the time my sister decided my cast-off P100 was not sufficient and *she* needed a college computer, too, I told her that the smartest thing to do was get an iBook, because Apples are well-built and have a better-than-Windows interface. Or maybe I suggested it first to my sister, point is the same -- soon *they* both had iBooks, and since I was looking for a laptop at the time and was likely to be Mom's tech support (however woefully unequipped I am for that), I ended up getting one too. So, three iBooks, extra memory soon in sister's and mine (it was cheap! $35 for 256 megs, 3 years ago), airport card in Mom's and mine. (Sister didn't need it as much, college ethernet etc.)
All three of them are still working great, have been updated infrequently but without incident, no virus problems, no dead screens, etc. The occasional lockup, the occasional crash (only on my machine that I know of), but mostly, good workhorses. Once in a while my mom calls to complain that her Mozilla icon has disappeared (why? I do not understand what could have happened to it -- couldn't have gotten far on foot
It's not my *favorite* laptop -- I dislike the keyboard, esp. the lack of a real page-up / page-down key, among other shortcomings -- but it seems the most robust. Strong hinge, a screen that's survived some rough treatment, a battery that's on the way out but still working as well as one can expect in a 3-year-old battery.
(The other reason it's not my favorite is that I like Fluxbox, KDE and Gnome at least as well as I do OS X, and Linux distros come with a lot more included software that I actually use -- so I like the Toshiba I'm typing on more than I do the iBook; maybe I'll put Linux on the iBook and like it better
2) Dad, on the other hand, pays for cheap, low-end computers, then keeps paying and paying and paying
Ah, well.
timothy
jrnl: http://tinyurl.com/c2l8yr / foes: http://tinyurl.com/ckjno5
Where I work, we use Deep Freeze to keep people from installing unwanted software. You can freeze some sections of the hard drive (such as C:\windows), and unfreeze others. I find it useful to have an unfrozen D:, and set "my documents" etc to point somewhere there.
.EXE or .ZIP files (and a special username to download the ones they need). That gives me SSH access to their network, a way to have it call my server to update dynamic IP's, and I can tunnel VNC as needed. Email could also be fetched through here and stripped of nasties using mailscanner/spamassassin/others
Of course, this doesn't work well with XP (needs updates for those nasty worms), but in that case you'd just have to make your family members underprivileged users.
My aunt is getting a new computer and High Speed. I'm putting strong consideration into turning their old box into a 'nix server/firewall... maybe with a proxy that blocks
I bought my folks a PC. They used it for approximately 4 weeks. Then they said, "you keep it, its too complicated". :)
So i got the PC, i bought them a nice filing cabinet, pens, paper and calculator etc. If they want something typed out, they can ask me, but this isnt often.
i say dont protect their PC's, protect them from PC's
I had to laugh when I read the original post:
"I assume that many Slashdot readers must serve as the IT staff for their parents."
Many of us are the IT staff for our kids! And I don't mean 4 year olds, I'm talking teenagers. Not all teenagers are as computer literate as we'd like to think -- my older step-kids, 11 and 15, have been exposed to tons of computer technology over the past 9 years, but still have much less knowledge than I did at age 10 (1980). I know 60 year old men who know more than young "geeks" that work for me in IT
I think a lot of it has to do with personal interest and motivation. For most average users, they just want to do what they need to do and don't care about Windows or Mac OS X. A computer that needs constant attention from an IT guy is a less useful computer
I'm not trying to push buying a Mac, but this is exactly why I switched to an iMac for home a year ago. It was comparable in price to an equivalent PC from several other manufacturers (HP, Sony, Dell, etc.), but I haven't had nearly the OS problems that I've had with the same kids using a PC. I just got sick of spending 8+ hours per month at home fixing the same I.T. problems we see at work.
My kids generally get my old machines, too. My Mom doesn't just because she's not that interested in it.
It's honestly easier to guide their use of the iMac because I'm home, so if I gave another family member (Mom, brothers, sisters, etc.) a computer, it probably wouldn't be a Mac. The biggest problem is when you look for software and the vast majority of the software is not compatible with the Mac at all. It's too easy for a newbie to buy a quickie piece of software at Walgreens and never realize it's not Mac compatible -- then they get mad at the fact that they have a Mac.
With my kids, I just steer them in the right direction when we're shopping for software. We've been able to do all of our home stuff on our Macs (iMac and PowerBook G4), and about 85% of my I.T. stuff on my Macs (some I.T. things are easier in UNIX/Linux than on Windows, which is nice).
Protection of the innocent is a non-issue on a Mac because I'm a dedicated parent. I don't need filter software, I just know what they're doing and control access times. The rest of the crap we deal with on Windows every day is non-existent in the Mac world.
Yeah, it's nice being a Mac-owning parent...
I installed WinXP with automatic-updates, enabled winXP Firewall, Norton Antivirus, and gave my mom a regular user account. I gave her the administrator password should she ever need it, but she would have to log in as Administrator (which is a lot of work) to do any damage. That system has been up and running stable for 2+ years.
Mom used to have an Administrator account, but after the 2nd virus (which 9 times out of 10 exploits user stupidity) I took away her access. Now she can't break the computer even if she wanted to. Go ahead, open all the attachments you like. "cool_song.mp3.exe" sounds awesome - open it up! Someone loves you? Better run that executable and find out what they have to say. Bring it on virii kiddies. My Mom is immune.
Install XP, Win2K, whatever... anything that has real permissions.
:-)
Setup your parents as limited users, but create a user called 'Installation' that has Administrative rights.
Make sure the visual theme for 'Installation' is so horrid to use (high contrast works well usually) that they will never accidentally use it. Lock down the theme with a policy.
Review their software and remove bad software that requires root access (ie, Administrative rights) to run.
Install nonMS alternatives for the core net Apps. Install alternatives for IM apps if necessary. Install alternatives for major content apps (like QT or Real) if you don't want them installing it themselves.
In other words, give them the power to install things, but make it inconvenient, and make sure that they don't have to install much themselves because you already covered all the bases with software you approve of.
That's my solution. And my Mom is still spyware and virus free for two years, with only a dozen or so 'help!' calls. Father's computer is, unfortunately, less healthy... but he bought a Compaq against my recommendation, so I give it up as a loss.
"I will trust Google to 'do no evil' until the founders no longer run it." Hello Alphabet.
It's probably been said already, but the best thing I ever did for my parents' computers was to install Firefox and hide the IE icon.
IE theme for Mozilla. This might even be parent proof.
Forget thrust, drag, lift and weight. Airplanes fly because of money.
It's relatively simple to keep your parents surfing in safety. As many people have already mentioned, Firefox is a good start. But that's not where you need to stop. While Thunderbird is stil in alpha, it makes a nice email client, and has fewer glaring security holes than some of the more popular clients.
But where everything comes together is with the last two important pieces of software. I used to be a strong supporter of The Proxomitron, but it's very difficult to find now, and is no longer supported, so I've switched over to Privoxy which runs on most platforms, incidentally.
Privoxy is a local proxy that does filtering on all web content that you view, removing things like some ads, and all unrequested pop-ups. It filters virtually all malicious content I have seen.
A personal firewall is important to have now, and there are some reasonable free ones around. The ones I like take a bit of configuration, but they sure beat Zone Alarm. The two I use are Kerio Personal Firewall and Sygate Personal Firewall.
Sadly, both these products used to be completely free, but the same is no longer completely true.
Essentially, it is important to use a good browser, mail client, local proxy and firewall. With those in place a virus scanner is often somewhat redundant, though one of those might be a good idea too.
On the spam prevention front, I find Popfile to be an invaluable tool. It is, however, a wee bit advanced. I suspect that most parents wouldn't quite grok it. I've heard good things about SpamAssassin, though, and it might be worth the effort of teaching parents.
I moved away. 2000 miles.
My mom refused to get a Mac. My brother in law, an educational consultant specializing in Lotus Notes talked her out of getting a Mac.
Guess what? He talked himself into supporting his mother in law. SUCKER!
Fortunately, he's fairly clueful, and does a reasonably good job of keeping the machine's virus defs updated, and keeping spyware at bay. But I haven't convinced him yet on how Mozilla will save him many hours of headaches each week.
Oddly enough - the #1 problem seems to be ongoing issues with her crappy HP printer driver. Which is also the #1 issue with my wife's iMac! (seems as if the only way to fix it sometimes is to uninstall and reinstall the damn thing.) Note to self: next time, buy ANY printer brand but HP. well, last time it was buy any printer brand but Epson. hm.. . . .
These are my friends, See how they glisten. See this one shine, how he smiles in the light.
I learnt from painful experience is that it's best to let parents learn to handle their machines themselves. Do not raise them to depend on you. That's the solution. Let them get a clue about what's going on and how to solve problems themselves. It's the only way :|
If a train station is a place where a train stops, what's a workstation?
...depending on how invested you are in your parent's computing. :)
My parents had the luck of having me network their house before I moved out after college. So the Cat 5 went to every room. Originally my parents had two Windows 98 machines that I stuck behind a linux firewall which certainly made life pretty easy for them for a while. But was Windows got targetted more and more, my parents were getting fed up with the maintenance they had to do to keep their systems up. Finally, this year my Mom said, "We'd like to try Linux. We don't want to buy new PCs to run Windows XP, so can we try Linux"? Of course I took them up on the offer
The plan was that my Mom would get the Linux PC and my dad would keep his Windows box for now. That way if they wound up not liking Linux or not being able to use it, they'd still have access to one machine they were familiar with. But, I had a little surprise for them. I took my mom's machine
back to my place and found that it was a little too slow for RedHat 9. No matter, I had two Pentium II 233s in the basement that weren't being used at the moment. So, I took both of them and the iMac-wannabe cases I didn't need any more and threw together two new systems.
I installed RedHat 9, but left off the bundled versions of Mozilla, OpenOffice.org, Xmms, and a few other apps. Then I worked on custom compiling the kernel to get smoother operation out of the boxes (including the pre-emptive kernel patch). The latest Samba went on for file sharing and interoperability with their Windows box. I also designed a few very professional looking icons for the OpenOffice.org suite, and "M" icons for Mozilla and Mozilla Mail (to mimic the "e" for Explorer). I layed out a custom Gnome Panel with all the possible buttons and drawers they would need. I installed the latest CVS W.I.N.E. and brought over a few of the Windows apps that they still wanted. I built the latest MPlayer for video and Xmms with MP3 support. Put a nice logout/shutdown button on the Gnome Panel at the far right and imported all the old Windows documents (Word, Excel, IE Favorites and some BMPs and GIFs). The simplest, but nicest (according to my dad) touch was some really nice desktop backgrounds of scenic shots from Australia that I took myself. To make things easier for them and myself, I also set them up with ssh connections to my server at my house that automatically log in with Public Key Authentication and set up tunnels for the x0vncserver and ssh. This makes remote support of their systems very easy. All they have to do is click on an icon when their dialup connection is up and I have access to their machines. They also have access to my private Jabber server and mail server over the tunnel as well.
I started on the project in late October and polished it through to X-Mas. My parents were only expecting one computer, but I brought both of them and boy were they happy. I told them that they could try them out for a few months and if it didn't work out, I had no problem helping them look for new Windows XP machines. I also told them that I coud provide "tech support" any time they needed it as long as I was near a computer. So far, I've only had a ew remote support sessions because the machines are easy enough for them to do most of what they need. After I got them set up with a Netgear TCP/IP print server, RedHat's printing setup mechanism got things going in less than 15 minutes. So my dad has been working with OpenOffice.org's Calc spreadsheet app and printing out what he needs. He told me, "This is just like Office"!
My birthday is coming up at th end of the week. I got a birthday card from my folks that they printed up using Mozilla on Linux to access a web based card designing app hosted by American Greetings (I think). So far it's ony a few months in, but my parents are happy. About the only problem they've had is the occasional IE only web site. They love the fast performance and stability of their new systems compared to their older
Un-news
I threaten my parents with an "Internet License," telling them I'll revoke it if they ever get a virus from clicking on a dumb email attachment. It helps keep the aware of suspicious emails and they tend to ask me when they're confronted with something that doesn't seem right.
I recently had the opportunity to work on my cousin's PC.. her husband had been running win2k unprotected on DSL for over a month. Total whorebox. I mean they were asking me, "what is mIRC and why is it running? we didn't install it." It reminded me of the time I forgot about the chicken I left to defrost in my sink before going out on vacation -- FOR TWO WEEKS!
I formatted and reinstalled, disabled as many services as possible and filtered TCP and UDP as much as I could prior to connecting to the net. I dove in and went straight to zonelabs. I stood with my finger on the cable while the download completed and soon as the dialog showed 100%, yoink!
I installed Zone Alarm, locked it down, and went back online to start the patching party. Zone Alarm blocked the first connect (port 135, which virus was that again? there are so many..) in 43 seconds. I checked. I left the Zone Alarm control panel up to show my cousin's husband when he came home from work since it continuously updates the number of blocked access attempts. Within six hours, ZA had blocked 983 attempts. And now, three weeks later, their system is still running fine. Not that they would notice if it wasn't, but still..
Intelligent Life on Earth
Back in the days of the Windows 95/98 systems there was this program called Trialblazer which would intercept any disk access done via DOS or Windows API calls, and make backups of any files which got screwed over. The end result was you could jump into the Trialblazer next boot and revert every setting back to whatever you had snapshotted, and everything would work exactly as normal.
Some of the best tests for it were installing a whole set of viruses and spyware, and deleting large quantities of the Windows directory. The next reboot would just restore it back to working condition.
Basically it ends up being like Ghost but where all the backed up data is stored on the same disk.
Of course these days we have Windows NT-based systems, which Trialblazer never supported (the guy who was writing it probably rightly decided rewriting an entire application to intercept a completely different set of OS calls was too much work.)
But these days, there are hardware devices you can get these days which are PCI IDE devices of the same type. You plug the card into the PCI, you plug the hard disk into it, and somehow they do exactly the same thing. Whereas this smacks of evil hardware RAID solutions, using this sort of thing as an idiotproofing system sounds like a damn good idea to me even now. These people don't need disk writing performance, they just need the machine to work, and this sort of backup makes that relatively easy without needing much user intervention at all (you have to perform the original snapshot when the system is working, and how many times you choose to do that is up to you.)
Karma: It's all a bunch of tree-huggin' hippy crap!
As many (most?) other posts have said, you should really look into non MS options. If money is not a critical issue you would likely be best getting a Mac. Otherwise I would strongly recommend either Xandros or OEone's HomeBase. The former for people who are very used to and like the WinXX interface and the latter for people who actually want to do something on their computer.
--
If I actually could spell I'd have spelled it right in the first place.
I installed mandrake 8.2 on a pc I built for them. They hadnt touched a computer before, they just stared blankly at me the first time I said "press escape".
They use it ever since, I did an upgrade with 9.2, they thanked me because "it became faster" (new kde). They also thank me whenever a virus wave hit their friend, because ALL OF THEM are hit in some ways every time and SOME OF THEM even disappear from the net for weeks "until their computer is fixed".
The praises I get for a simple install once a year, and a few updates here and then: PRICELESS!
Yeah, I know this was meant to be funny, but actually it'd probably be a bad idea for him to have children who is also quite technically-oriented. My mom is a special education teacher and she's constantly telling me that I can't marry anyone technical since it strongly increases the chances of autism in children. This was partly discovered by Microsoft who started looking into why they were having so many insurance claims for autistic children amongst their employees. It seems that with more women in technical positions now that more co-workers are getting married. Then, when you combine the genes of two very analytical people the child's genes may be too strongly concentrated with this analytic thinking which results in Autism or Asberger's syndrom. They may be very intelligent, but have many difficulties dealing with everyday social situations.
So, go ahead and marry someone intelligent, just not too technical.
Just put them on The Hurd and be done with it. You know we'll all end up there eventually.
Do you want to save changes before closing the document?
(Yes) (No) (Cancel)
One thing I appreciated about Apple is their tendency to use verbs- For instance TextEdit's buttons read (Don't Save) (Cancel) (Save) instead of Yes and No. Safari's Add Bookmark pane reads (Cancel) (Add). It's just better that way.
Oh yeah and to keep this on topic, my brother and I just got our mom an eMac and it works well for her (and her 5673 digital pictures).
You're actually asking a question like this on slashdot? You know you're going to get Linux as your answer.
Seriously, when I first ran Windows 98 on my mom's computer, she got so frustrated with Outlook Express refusing to check her mail that she gave up using a computer several times.
After convincing her to go back, she managed to obtain a virus. She freaked and refused to use a computer again. So I installed Linux, and she has been happy ever since.
The tech support calls have been cut into a third. And when she needs help, often it's just an ISP-related problem.
Now people claim that Windows is idiot-proof and Linux is hard. Well, my mom hasn't had any problems with Linux, but was constantly frustrated with Windows. So, perhaps Linux is "idiot-proof" and Windows is difficult to use.
To many people this may be considered a troll, but I'm being serious here and the guy asking the question should take this seriously.
Hypocrisy is the 8th deadly sin.
I'm sorry Mama.
I never meant to hurt you.
I never meant to make you cry,
But tonight, I'm cleaning out my closet.
- eminem
unplug ethernet, tell them where the nearest internet-caffe is
Getting a Mac, moving to Linux and switching to Firefox etc... are all excellent suggestions, but I've found that they aren't always practical. Many people learn by rote, and switching between all-MS products at work and other applications at home may generate even more confusion (and thus work for you) than the security problems they solve. And although Firefox is getting really good (it's my full-time browser), I do encounter bugs and incompatible pages more frequently than I did when I used IE, and have not had good luck with semi-skilled users I've switched to it.
This is all a long winded way of saying that *if* for some reason you're in a situation were you need to leave the machine in basically "pure Windows / MS" form, here are some ideas:
If you're cheap: Keep virus protection current (look to AVG or Panda if you need something free). The google toolbar for IE is a decent popup blocker and will take care of most of the spyware popups as well as make searching easier. Install both Ad-aware and Spybot Search & Destroy... manually update and run them when you visit, and use the Spybot "innoculate" feature. If they've got XP, demote their user accounts so that they aren't administrators, and either install all software for them or teach them to change accounts to do it themselves. VNC is nice, but the built-in remote assistance also works, and the full-blown remote access built into XP Pro works well over low-bandwidth connections when configured properly.
If you / they are willing to spend a few bucks and don't have a complete allergy to commercial software: Norton Internet Security isn't a bad package (if you turn off the parental controls crap) and will do most of what you need. The Antivirus and firewall are reasonably solid and very easy to use, as is Norton Antispam, which takes care of popups and browser-based spyware installation as well as mail filtering that's well-integrated and easy to use with Outlook and OE.
-R
Windows is not the problem. User-ignorance is a problem, but it's not the big problem either. It's what's installed/configured. Here are some tips:
Cut that out, or I will ship you to Norilsk in a box.
My father got his first computer last year at age 73. Fifteen years ago he used a couple of custom DOS programmes at work for a while, but that's all. Now he had to start from the very bottom basics, things like how to use the mouse and what the shift key does.
For a man who doesn't know what the shift key does, the learning curve is equal in all common operating systems. There was no legacy here, nor any acquired bad habits to take into account. So I installed Redhat on his machine.
The first major advantage, for the both of us, is that I can do everything on his machine remotely. We live some 3000+ km apart, so dropping by to do an update or fix a problem is not an option. However, as long as sshd runs and he can connect to the net, there is no problem that can't be fixed remotely.
The second major advantage is that we could skip most part of the security litany. No Outlook there. No MSIE. No spyware that comes in easy click-here-to-install rpms. Mozilla is secure enough for clueless use all by itself and, if he ever tries to run Netsky, all he'll get is a question he can't answer.
The third major advantage is that he is protected against himself. He can't ruin the system no matter what he does. Yes, he does have the root password, but he has no concept of what root is and no wish to find out. A little bash scrip backs up his home directory on CD every once in a while and that's all it takes to keep that system sane.
After eight months, the net result of this is only positive. All the probems he has had so far are of the kind he would have had on Windows too. Of all the problems mentioned in the main article, he has had none.
My short advise is: if your parents are new to computers, don't waste their learning efforts on Windows. Go straight for your favourite OS, as long as it has a good-looking and well-functioning GUI on top of it.
The consensus was to get the inlaws an older computer or a cheap one from dell, load it with win2000 and all the software they would *need*, and then give it to them.
Oh, and not give them the admin password.
Want to install something? Too bad.
Yes, this seems harsh, but you don't know my inlaws. I've already fixed their win98 machine once. Symptom: so much malware that windows would freeze when trying to open IE -- I opened the taskmanager to see what was running and there were three pages of processes. Most of which were adware and spyware, and a few viruses. Many many hours later it was good as new.
Later we get another call. Laurie is in her room crying, mom wont talk to dad, dad is screaming and swearing: the computer is broken, it's our/her/their fault, it wont print, and on top of that the land phone line wont work. We tell them, after an hour of his ranting, to call the fucking phone company. He does, the tech shows up, pulls the USB printer cable out of the phone jack and leaves.
Well, they've called again. Opening IE freezes up the computer, and we've been informed that they have visited us enough and it is time to visit them, now (they live four hours away in the anus of Texas) and we should fix the computer while we're there.
I may bring a gift.
teach them how to use XFree86 and GNOME or KDE. No more spyware, worm, virus, dangerous program threats. Use Evolution for Email, and OpenOffice.org for Office software. Use Mozilla or Firefox for web access.
Either that or don't give them an account with Admin access to install programs on their Windows system.
Remember, Slashdot does not have a -1 disagree moderation, and no, troll, flamebait, and overrated are not substitutes.
Just load their system with auto-updates, etc, then make a restore image on CD or slave hard-drive. Give them a boot floppy that automatically restores to your original config. Now you just have to teach them to save to the slave drive.
Two big conduits for evil software. I've seen moderately protected machines (no router, no auto updates, no spyware elimination) with very little bad stuff, and well protected machines with tons of crap because the owner(s) look at porn and/or download music. Please folks, don't think Mom or Dad are above surfing for pron or grabbing a couple of tunes.
Do we "migrate" our parents.
I can just picture the whole scenario. A note hanging on the kitchen wall:
"Notice! On March 18, parents will migrate to the new service as discussed in internal family-meeting on February 06. Should parents still have any questions, please feel free to contact the sys-admin (your son).
And, oh yeah, can I have some more pocket-money?"
Dood, I know this is /. and that we be abunchazealots, but still...
You can run Windows in a secure fashion. First thing: Disblable useless services (like Universal PnP, Remote *anything* and so on). Second: Setup separate user and admin accounts.
If you as a third move install third-party software for netuse (Opera, Mozilla. That kind of stuff), you'll need some pretty clueless people in order to screw the machine over.
The fourth and probably best move you can ever do, is setup a systempartition with only the system and applications (move documentfolders elsewhere), and take a Ghost-snapshot. Then if they somehow manage to screw up, you're recovered in 5 minutes with absolutely no hassle.
That's four simple goddamn things you need to do, and your Windows is bulletproof enough for any standard needs.
What's the problem? No really, what is the problem?
Yes, Linux may be better (for some things), but sometimes stuff like work ++ creates things called software issues, and VMware really is more of a hack than a solution unless you have the extra memory.
Not Buzzword 2.0 compliant. Please speak english.
OMFG it was the nastiest thing I had ever smelled. I opened the door and nearly puked on the floor (I have a weak stomach and have puked from cat shit in a litter box). I thought someone broke into my house while I was gone and died in there. It was in June in NJ. A hot June.
I opened a bunch of windows elsewhere in the house before making it into the kitchen. I leaned over the sink and opened the window over the sink. There were hundreds of flies and hundreds more maggots crawling ALL OVER it. It must've taken half an hour to get up the strength to reach in there and throw it away in a trash bag. Then I went to the supermarket and bought fly spray and a couple bottles of Clorox Cleanup. I went through all the Clorox, but god damn that kitchen was clean when I was done.
I also went to pour out the milk, and the quart emptied as two big chunks so there I went with the weak stomach all over again.
Ahhhhhh, bachelor livin'
Intelligent Life on Earth