Iam yet to read all the details about the IB token business! But the basic security mesasure I follow is never browse web from the trading computer. I open Medved QT in 3 pcs using 2 data providers with IB window running in one of them. I keep mail,porn etc in a separate system so that no shit enters my tading pc.