luv2bsecure
May 31st, 2002, 03:36 PM
Oh Pete, no, I didn't make myself very clear. I am a step ahead of you with your suggestion. I have downloaded it and plan to check it out. I think it sounds very interesting. What I meant, was knowing nothing about it, I couldn't trust it, or anything as far as that goes until I understand the method.
The reason the method is important is that some things can truly appear to be secure after it has "done its job," but in reality are still recoverable by hardware/forensic methods. Then, it's the old, "Are we protecting you from your kids going through your files, or do you want to be protected from three letter agencies?" Many programs appear to make data unrecoverable, and DO make it unrecoverable to simple software tools. BUT, if you need the high-level security, only after thorough testing can it be trusted. Does that make sense?
It might be like an exterminator that comes to the house and rids you of ants. They ARE gone. But, you discover they're back three months later. However, you call another exterminator who explains that what the other company did got rid of the ants alright, but didn't use the kind of chemicals that KEEP them away long-term. (Make them unrecoverable.)
That's why you should NEVER use an encryption program that claims to use "our own highly secure algorithm." (A proprietary encryption method.) Encryption is a science. Real encryption must be open source, peer-tested, and proven before it can be in the same truly secure league as a Blowfish, *Rijndael, etc.
The SAME goes for Disk Wipers. In fact, I need to write for the source as it is NOT available for this program. If it's not given, forget it. Nobody that understands how data and freespace is wiped would EVER trust it. I imagine though we'll get it and I am very interested. I hope though I have made sense as to why method is important. I didn't mean to say write it off for good, I just meant I know nothing about it NOW. There was not a whitepaper with technical data on the site and until it is proven fully secure (which with these programs can easily be done) I can't, honestly, personally recommend it.
Your question and suggestion was well taken though, and I hope I made some sense explaining why method and integrity of the code is all important.
Good to hear from you, by the way. I haven't been on too much lately. Hope all's well.
John
Luv2BSecure
*
The reason the method is important is that some things can truly appear to be secure after it has "done its job," but in reality are still recoverable by hardware/forensic methods. Then, it's the old, "Are we protecting you from your kids going through your files, or do you want to be protected from three letter agencies?" Many programs appear to make data unrecoverable, and DO make it unrecoverable to simple software tools. BUT, if you need the high-level security, only after thorough testing can it be trusted. Does that make sense?
It might be like an exterminator that comes to the house and rids you of ants. They ARE gone. But, you discover they're back three months later. However, you call another exterminator who explains that what the other company did got rid of the ants alright, but didn't use the kind of chemicals that KEEP them away long-term. (Make them unrecoverable.)
That's why you should NEVER use an encryption program that claims to use "our own highly secure algorithm." (A proprietary encryption method.) Encryption is a science. Real encryption must be open source, peer-tested, and proven before it can be in the same truly secure league as a Blowfish, *Rijndael, etc.
The SAME goes for Disk Wipers. In fact, I need to write for the source as it is NOT available for this program. If it's not given, forget it. Nobody that understands how data and freespace is wiped would EVER trust it. I imagine though we'll get it and I am very interested. I hope though I have made sense as to why method is important. I didn't mean to say write it off for good, I just meant I know nothing about it NOW. There was not a whitepaper with technical data on the site and until it is proven fully secure (which with these programs can easily be done) I can't, honestly, personally recommend it.
Your question and suggestion was well taken though, and I hope I made some sense explaining why method and integrity of the code is all important.
Good to hear from you, by the way. I haven't been on too much lately. Hope all's well.
John
Luv2BSecure
*