Ok, I hope this subject hasn't been discussed ad nauseam, but a quick thread search didn't yield exactly what I was looking for.

Summary of safe surfing strategies:

1. Use Firefox's keep cookies until I close Firefox, with appropriate exceptions. (Of course, you could go with the option of having Firefox ask you every time, but I find this impractical).

2. No script is a good extension to deal with possibly dangerous scripts.

3. Use "about:config" to disable third party cookies. Set network.cookie.cookie behavior to 1.

4. McAfee SiteAdvisor is also a good tool that will warn you of potentially dangerous/untrustworthy sites.

I think these steps pretty much cover all the basics, but I'm sure people have additional ideas.

HOWEVER, what is missing in Linux is the ability to preemptively block bad cookies, which is what programs like Spybot S&D and SpywareBlaster offer. Of, course you could use Firefox's exceptions rules, but that requires the user to be aware of all known bad cookies/domains, and manually enter them as exceptions.

I suppose this could also be achieved by means of the hosts file, but is there a program that can handle this automatically, as well as be able to regularly update its database/rules?

If there is a Spybot S&D equivalent in Linux, I would love to know about it!

Thanks

Spyware really isnt an issue in LInux.

I use Firefox + NoScript + CookieSafe along with Privoxy, block third party cookies, and have it set to ask every time. Anything I don't need everyday like mail and forums, I set to use For Session. I also turn the prefetch and search engine suggest off.

To get rid of most annoying ads I use Stylish with the Ad Blocking FiltersetP, I also use a host file from http://www.mvps.org/winhelp2002/hosts.htm, that I edit since most of the carp that is dangerous to windows has no effect on Linux, I leave just the annoying ad sites mostly.

The following user.js settings get rid of a lot of annoying web crap, especially when used with NoScript and Stylish.

/* Disable network prefetching/search engine suggest */
user_pref("network.prefetch-next", false);
user_pref("browser.search.suggest.enabled", false);

/* Put an end to blinking text! */
user_pref("browser.blink_allowed", false);

/* Disable image animation */
user_pref("image.animation_mode", "none");

/* Disable scrolling marquees */
user_pref("browser.display.enable_marquee", false);

/* Block 3rd party cookies */
user_pref("network.cookie.cookieBehavior", 1);

I agree with you there, but what interests me isn't Spybot's ability to detect/remove spyware (as you said, this is mainly a Windows issue... for now) but rather Spybot's ability to preemptively block known, bad cookies.

I will look into the options you listed. I suppose you could also write a script that automatically updates your hosts file from a trusted source, such as the site you mentioned...

The flip side or so it seems..about "CookieSafe" that seems to follow an "AllowAll" principle by default unlike "NoScript" which follows a "DenyAll" by default. Still very useful..will soon check out Privoxy..maybe tonight when I get home from work

Cheers
Arvind

There is a simple way :

Xterminal + su + start firefox from shell

Wouldn't that be less secure?

Sorry ! I'm wrong , it doesn't work .

That would be running a web browser as "root", which is a very insecure thing to do. NEVER run a browser as root.