Security On Http Sites

I would like to know how I can use http sites more safely.
Here is the site in question:
http://www.early-retirement.org
I installed an extension called https everywhere. However, that doesn't seem to do the trick.

The other idea that I have is to hit my neighbor's wifi (my ISP allows me to do this) from an OS that doesn't write data to my drive. That basically reduces the risk to root kits, right?

Edit: maybe virtual machine?

 

I have Xfinity. As I understand, they have their customers' routers as wifi hot spots for other customers. One of my neighbors seems to have theirs turned on for that.

AV / Malwarebytes are not generally used for linux home computers. My guess is that they wouldn't do much vs a reasonable man in the middle attack.
Turning off Javascript does seem like a good idea. If I remember correctly, Flash player is another thing to turn off. I might actually just use Lynx (web browser), because I think it doesn't have those things at all.

 

You can always submit a site to VirusTotal before diving in. It's another string to your bow if you don't mind mixed metaphors

 

Another way of bumping up your defences is to sandbox what you are doing. A sandbox contains everything you do until you exit, when it is discarded. Win 10 has one built in but they can be added to earlier versions.

 

A convenient way to use VirusTotal is via their official browser extension(s).
https://support.virustotal.com/hc/en-us/articles/115002700745-Browser-Extensions

 

As I understand, customer routers are the way that the traffic moves. When Xfinity sends you a router, it's turned on. If Xfinity owns real estate around here where they house their router, that's news to me. I don't have any serious networking equipment (like a large antennae) so Xfinity's real estate would have to be quite nearby. So, I am pretty sure that they are using customers' routers. Perhaps it's in a well implemented way.

That is an option but issues don't jump out and announce themselves right away necessarily. Good malware often has the goal of growing its influence instead of insta bragging.

----
I hadn't realized how many sites are non-https. It's truely eye opening.
I am going to try blocking them all, using https everywhere (not the default setting but I set it).
I will sandbox or virtual machine them.

 

In terms of security, HTTP is completely fine when browsing the web. It only becomes an issue when you're entering sensitive data into form fields on a website. If you're entering sensitive data into an HTTP web page, that data is transmitted in cleartext and can be read by anyone.

 

This thread is more than a year old...