Talk about leaving the keys in the house

Details

Category: Blog

Literally, this is what a lot of backup and folder sync providers do. Most backup providers may offer "military grade encryption" but it's often pointless because how it is setup. Encryption (and the keys) are usually tidied down to the login credentials. So break into the account, server or a nosey server admin wants to look in, it renders the encryption useless. It's a bit like locking the house door but leaving the safes keys inside.

Solution? Encrypt data client side so even if you break into the server all you get is encryption files. To decrypt you need the software, software license key (maybe), username, password/api and the decryption password. This is a very easy, fast and cheap way of securing cloud data. So instead of using Mozy, Carbonite, DropBox - get your own cloud storage space and use 3rd party software to upload file and encrypt them locally.

New Article - Web monitoring and blocking will only infuriate LulzSec and similar groups

Details

Category: Blog

Web monitoring and blocking will only infuriate LulzSec and similar groups With the recent government proposals to block websites (The Pirate Bay) and monitor emails, web browsing, phone calls, text messages and VOIP, it raises a whole host of questions that need addressing. Not only will it infuriate groups such as LulzSec, Anonymous and TeaMp0isoN it will also encourage individuals to go more underground by using increasingly enhanced countermeasures.

The proposals will remind people of communist or authoritarian states such as China, Iran and Syria. In China it is alleged they have 40,000 staff dedicated to sifting through social media alone. Phone calls are believed to have automated monitoring systems which flag up keywords such as democracy or Tiananmen Square. If flagged, a case officer is meant to monitor the lines. The same process applies to SMS, emails and also postal items.

Read more …

A usb stick with a serious self destruct mechanism

Details

Category: Blog

Well I have heard of plenty of hardware encrypted USB sticks and software systems which can self destruct, but this is something else: http://www.v3.co.uk/v3-uk/news/2144797/security-guardian-usb-stick-tracked-remotely-deleted/page/2.

Most hardware encrypted sticks lock out after 10 attempts, self erase or kill the key but this one physical destructs by using a electronic charge. No device cost is given but one website said £25 a month!

One way of getting passed it is wrapping it in lead sheets or a Faraday cage thus cutting off the GPS or Sim card signal. Still though the data should be well encrypted but the cost is a put off.