June 16, 2006

3M Privacy filter

Laptops are a great tool. The portability of a laptop can be problematic. Especially when you are using the laptop in public. Advances in LCD technology has given us better resolutions and brighter screens.

The advances LCD in technology has made it easier for prying eyes to get a good look when using a laptop in public.

3M came up with a great solution, a laptop security screen that doesn't allow poeple next to you to see what you are working on.

The security screen is called 3M Privacy filter.

Laptop Security Screen

Laptops are a great tool. The portability of a laptop can be problematic. Especially when you are using the laptop in public. Advances in LCD technology has given us better resolutions and brighter screens.

The advances LCD in technology has made it easier for prying eyes to get a good look when using a laptop in public.

3M came up with a great solution, a laptop security screen that doesn't allow poeple next to you to see what you are working on.

The security screen is called 3M Privacy filter.

Secure FTP

File transfer protocol or FTP sends username, password and data in the clear over the internet.

Secure FTP or sftp was developed to keep the data encrypted between the FTP client and server.

April 18, 2006

VeriSign SSL

VeriSign offers many types of SSL certificates for your website.

Sometimes finding/picking the right SSL certificate can be confusing. I found this webpage, where you can compare their various VeriSign SSL offerings.

April 11, 2006

Hard drive Encryption

If it is windows, the easiest one is the one built into it, the EFS
(encrypted file system) which uses triple-des as the cipher algorithm,
and that is fairly secure.

If the OS is linux, then it is not so simple to do, but from what I have
tried and read, the most secure is a program called loop-aes.
Essentially you boot off a live linux-cd like knoppix and run the
program from there. If you want to have the HD encrypted while booted
into the OS, you have to recompile the kernel to add in some special
options, and make a loopback device that essentially encrypts/decrypts
data to/from the drive, which is no easy task to set up.

Encryption is not like what's in the movies. It's hard to setup, harder
to break, and not very sexy.

March 26, 2006

Secure Hash Algorithm

The family of SHA (blocked algorithm of parasitic information) is a whole of relative cryptographic functions of parasitic information. The function most generally used in the family, Sha-1, is used in a large variety of popular applications of safety and proclaims a protocol, including TLS, SSL, PGP, SSH, S/mime, and IPSec. Sha-1 is regarded as the successor with MD5, a first, employee usually function of parasitic information. The algorithms of SHA were designed by the agency of national safety (NSA) and published like normalizes government of the USA. The first member of the family, published in 1993, is called officially SHA; however, this is often called Sha-0 to avoid confusion with its successors. Two years afterwards, Sha-1, the first successor of SHA, was published. Four additional alternatives since were published with increased ranges of output and a slightly different design: Sha-224, Sha-256, Sha-384, and Sha-512 -- sometimes collectively indicated under the name of Sha-2. Attacks for were found Sha-0 and Sha-1. No attack still was returned Sha-2 account of the alternatives, but since they are similar to Sha-1, researchers is worried, and develops candidates for a news, better standard of jamming.

March 22, 2006

ssl security

SSL is a transport-layer security protocol, that encrypts data between the network source and destination based on keyed encryption. Once that data is received by your web server, from a network standpoint, SSL's job is done, and any transferred data that is process by IIS will be processed and stored in the clear. If you want to secure the data past that point, you need to look into something like PGP, which could possibly be used in conjunction with an IMAP or SMTP client to re-encrypt the data on the disk and e-mail that encrypted data to the recipient (you), who would then decrypt it a
second time using the same software.