DataSecurityExpert.co.uk now includes a free comprehensive IT Security Guide

Details

Category: Blog

ITSecurityGuide.co.uk has been merged with DataSecurityExpert.co.uk. This section now offers general and unbiased free advise. Two more sections coming soon on server and cloud security.

Talk about leaving the keys in the house

Details

Category: Blog

Literally, this is what a lot of backup and folder sync providers do. Most backup providers may offer "military grade encryption" but it's often pointless because how it is setup. Encryption (and the keys) are usually tidied down to the login credentials. So break into the account, server or a nosey server admin wants to look in, it renders the encryption useless. It's a bit like locking the house door but leaving the safes keys inside.

Solution? Encrypt data client side so even if you break into the server all you get is encryption files. To decrypt you need the software, software license key (maybe), username, password/api and the decryption password. This is a very easy, fast and cheap way of securing cloud data. So instead of using Mozy, Carbonite, DropBox - get your own cloud storage space and use 3rd party software to upload file and encrypt them locally.

New Article - Web monitoring and blocking will only infuriate LulzSec and similar groups

Details

Category: Blog

Web monitoring and blocking will only infuriate LulzSec and similar groups With the recent government proposals to block websites (The Pirate Bay) and monitor emails, web browsing, phone calls, text messages and VOIP, it raises a whole host of questions that need addressing. Not only will it infuriate groups such as LulzSec, Anonymous and TeaMp0isoN it will also encourage individuals to go more underground by using increasingly enhanced countermeasures.

The proposals will remind people of communist or authoritarian states such as China, Iran and Syria. In China it is alleged they have 40,000 staff dedicated to sifting through social media alone. Phone calls are believed to have automated monitoring systems which flag up keywords such as democracy or Tiananmen Square. If flagged, a case officer is meant to monitor the lines. The same process applies to SMS, emails and also postal items.

Read more …