Archive for July, 2008

Laser listener DIY

Posted in Gadgets on July 24th, 2008 by admin – Be the first to comment

Laser microphone:

More…

RFID security exposed

Posted in Gadgets on July 24th, 2008 by admin – Be the first to comment

RFID security exposed… read on.
 

Check it out http://www.rfdump.org/, there you can find the softare and hardware (in the limits of 500$ for the hardware - reader and writer, software is free) you could use to experiment and audit RFID security. If you’re a python fan, check out http://rfidiot.org/

This thing works with most RFID tags widely used in ID cards, physical security systems, e-passports, etc.  The buzz is everywhere, if you don’t know RFID is as insecure as walking with a bag of money in a bad neighbourhood, then… you don’t need to read further, just live your happy uninformed life ;)

For the rest of us, http://cq.cx/proxmark3.pl might prove useful too - schematics on building your own RFID equipment, and the necessary software.

One more project for Extended range RFID skimmer

Securing Windows XP - simplified

Posted in Windows on July 24th, 2008 by admin – Be the first to comment

Securing Windows XP is easy. You just need to follow a few hundred easy steps :D

Seriously, I’ll try shortening this up. First, you need a *good* firewall. I don’t know about you, but I just don’t trust the built-in one. Don’t know anyone who knows what it is and trusts it, though…
The best firewall I’ve come to use is Comodo Firewall - it has a period of learning, let it know which apps are safe, you will be the mentor for a while - but it’s worth it. It’s rock solid. More…

Secure Encryption of Data

Posted in Encryption on July 23rd, 2008 by admin – Be the first to comment

Secure data encryption - is it as hard as it sounds? No, not at all. Whatever your OS might be, Mac OS X, Linux, or maybe even the worst case, Windows, you are still safe when using TrueCrypt. It is a free software, it is opensource, and extremely easy to use. It has more options than most of the free software you might stumble upon - and that is the beauty of it.

It even offers “Plausible deniability” - if somebody forces you to give up the key by torture or threats, you can still be secure by giving up a false key to a false data, so to speak - you can read about it here - http://www.truecrypt.org/docs/plausible-deniability.php

The basic functionality of the software is to encrypt all your data including the OS, and asking for a password to boot up and decrypt in real time, or create a virtual volume where your secret data will reside. It is all clickable and easy to set up, so just give it a try.

Download

Secure Windows Vista (the hard way)

Posted in Windows on July 22nd, 2008 by admin – Be the first to comment

There are 2 roads you could take to secure your beloved Vista. You could download the shiny “Secure anti-malware + anti-spyware + anti-virus + firewall + virtual sex partner” program, and feel “secure” :D

or..

you could follow this guide. And download the Windows Vista Security Configuration gude, written by the security community in collaboration with Microsoft(tm), and BE secure.

Get it here (as in here), at MS or at NSA

You will need at least basic system administration knowledge to apply it, and.. don’t forget to make a backup of your system *before* you apply it. More…

Securing Mac OS X Leopard

Posted in Mac OS on July 22nd, 2008 by admin – Be the first to comment

Securing Mac OS X Leopard is not an easy task - well, at least not one that you can do in 15 minutes. You could follow some simple guideline, but this one is THE guideline.

One more security guide on this wonderful OS - put your Leopard on a chain, in a cage, and use it safely ;)

Being written by Apple, I don’t think anyone else could give you any deeper explanation on Mac OS X security and how to set it up.

Fetch it here

Securing Debian (and ubuntu, kubuntu etc)

Posted in Linux on July 22nd, 2008 by admin – Be the first to comment

There is really no point to post a step-by-step guide, write one myself, or copy it from somewhere else, when there is such a good (end BROAD) how-to on the Debian documentation project.
It applies to Ubuntu as well, and all other debain based distros. It applies to most linux distributions too, but it is better to check if there is anything distro-specific in your case.

So, here it is: Securing Debian in html format, or the same in PDF