encryption ?

Discussion in 'privacy technology' started by Bethrezen, Nov 15, 2002.

Thread Status:
Not open for further replies.
  1. Bethrezen

    Bethrezen Registered Member

    Joined:
    Apr 16, 2002
    Posts:
    546
    hi all

    i was reading this post

    http://www.wilderssecurity.com/showthread.php?t=4922

    and the ascocated page that goes with it and what i read troubled me then i came across this post

    http://www.wilderssecurity.com/showthread.php?t=3919

    and i got to thinking that for all the lil apps i have like adshield and spyblocked and spybot

    i have been missing an area of computer security so i though i would come hear and ask a lil advice before i proceed

    see even though ie is supposed to be using 128 bit encryption to encrypt my traffic there is obviously something a miss because ie seams to be broadcasting all sorts of info on to the net which i want to stopped as this could potentially be a problem as evidenced below

    http://www.gemal.dk/browserspy/

    comments anyone
     
  2. *Ari*

    *Ari* Registered Member

    Joined:
    Feb 15, 2002
    Posts:
    431
    Location:
    Finland
    Hi Bethrezen

    I just wonder WTF is mozillabug and wtf it is doing on my computer ? :oops: this makes me more than mad now
    I got a bunch of email addresses here, all from my computer , shall I publish these addresses now or later ? !!

    getting mad Ari

    thank you Beth
     
  3. peakaboo

    peakaboo Registered Member

    Joined:
    Oct 20, 2002
    Posts:
    377
    Proxomitron is very effective in stopping both web page potential nasties such as java scripts, meta cookies, iframes etc, and also effective in cutting down on ie broadcasts...

    the little cdrive info @ gemal is just a trick no one can see it but you, but it is scary. This is handled by proxomitron by making all iframes - links which only execute when you click on them.

    if you decide to try proxomitron look under web page filter and check iFrame/iLayer to link...

    get proxomitron here:

    http://home.arcor.de/six/download.html

    instructions for setting up proxy for ie:

    http://home.arcor.de/six/Installation.html

    - great program but there is a little learning curve.

    FYI using proxomitron properly configured the site you referenced will be unable to pull any info from your system.

    try this link here before and after you get going:

    http://privacy.net/

    click on full analysis and see how much info can be pulled.

    again using proxomitron you can stop all of this...

    more tests - you should be able to pass them all:

    http://www.pcflank.com/browser_test1.htm

    http://www.pcflank.com/scanner1s.htm

    http://www.jasons-toolbox.com/BrowserSecurity/

    http://browsercheck.qualys.com/

    http://www.dslreports.com/scan

    Good Luck

    Also get yourself a good file encryptor... when you send email anyone can read it so I've read unless you encrypt.
     
  4. notageek

    notageek Registered Member

    Joined:
    Jun 3, 2002
    Posts:
    1,601
    Location:
    Ohio
    Well being that i use WebWasher and really only passed 1 of the tests at jasons-toolbox is so sad. I really don't like Proxo. It seems to slow everything down.
     
  5. peakaboo

    peakaboo Registered Member

    Joined:
    Oct 20, 2002
    Posts:
    377
    notageek,

    Agree on sad state of passage for your pc using WebWasher.

    Using proxo - I pass all the tests @ jasons-toolbox.

    How did you do at privacy.net?

    I also had the same initial question re: speed.

    What I did was to actually time page load times for a few of my favorite sites before vs. after loading proxo. I used Tclockex to time page load seconds: http://downloads-zdnet.com.com/3120-20-0.html?qt=tclockex&tg=dl-20

    I found the page load times using proxo to be as fast if not faster - I would have dumped the program otherwise.

    Proxo is one of the best programs I have.
     
  6. notageek

    notageek Registered Member

    Joined:
    Jun 3, 2002
    Posts:
    1,601
    Location:
    Ohio
    It's looks like I didn't do that well over at privacy.net. They was able to tell everything. The sad thing is that I like WW. I think it's a good program. I try Proxo again and kept getting error messages so I gave it up. Thanks Peak.
     
  7. peakaboo

    peakaboo Registered Member

    Joined:
    Oct 20, 2002
    Posts:
    377
    notageek,

    If you want to try again let me know & I'll walk you thru it.

    I'll check back in a few, doing some work outside.

    Did you use the zip file for just Proxomitron or did you download Proxo with the installer.

    If you go the zip route (that's what I did), just dwnld the zip from here:

    http://www.computercops.biz/PROXO

    establish a folder called Proxomitron under c:\Program Files

    unzip the file and extract all contents to

    c:\Program Files\Proxomitron

    gotta go but will check back in case you would like to try again.
     
  8. notageek

    notageek Registered Member

    Joined:
    Jun 3, 2002
    Posts:
    1,601
    Location:
    Ohio
    Thanks peak. I downloaded the Proxo with the installer on it. I'm going to try to reinstall Proxo.

    As for taking the Jasons-tools i took the javascript test again after tweaking WW and passed all but four. The four are javascript (the first test), model pop-up test, modeless pop-up test and on un load test.
     
  9. Bethrezen

    Bethrezen Registered Member

    Joined:
    Apr 16, 2002
    Posts:
    546
    hi

    iv tryed usin proxie befor but i cant work them coz there to complicated

    how ever i did decided to get a good encription tool i decided to download cripttex as its real easy to use and real small and does what i need it to do which is to encript any file i ned to encript

    now i need someone to sergest an encription tool that works with web mail and with ie so that my email cant be read if intercepted and so my comunications while on line are secure so i cant be eves droped on while on line

    anyone got any sergestions ??

    [edit] by the way this tool must auto decript when it gets to the other side as my friends most likey wont have encription software

    it must also be software that uk residents can download as i am not a resedent of the us i cant down load pgp
     
  10. peakaboo

    peakaboo Registered Member

    Joined:
    Oct 20, 2002
    Posts:
    377
    try A-lock

    http://www.pc-encrypt.com/_site/alock/index.mhtml

    http://www.pc-encrypt.com/

    I have not had time to try it yet so if you try it and like it or not, come back and tell us what you think.

    also, luv2bsecure had a great post with a couple of good looking encryption tools...

    I was going to try ABI coder, but am waiting on the next version after 3.6.1 ...

    http://www.abisoft.net/bd.html
     
  11. Bethrezen

    Bethrezen Registered Member

    Joined:
    Apr 16, 2002
    Posts:
    546
    hi

    alock seams to work ok but my mager problem is that my email message dont decript when it gets to its desination so the only way my friends could read encripted web mail is if thay had this program to which dont do me any good i need a web mail encripter that will self decrip when it gets to my friend with out him neading to have my password and with out him havin any incription software
     
  12. notageek

    notageek Registered Member

    Joined:
    Jun 3, 2002
    Posts:
    1,601
    Location:
    Ohio
    Hi Beth- Have you tried PGP yet? From what I understand is that you encrypt stuff send it and the other person can unencrypt it with a passphrase. I don't know that much about PGP. You can find lot more info at: http://www.staff.uiuc.edu/~ehowes/pgp-vers.htm#Plugins

    If you use OE to send mail try looking into the OE encryption program that comes with OE.

    If you find one that works with all kinds of email programs please post here. I am looking for a program like you're looking for.

    Added URL tags
     
  13. Bethrezen

    Bethrezen Registered Member

    Joined:
    Apr 16, 2002
    Posts:
    546
    hi

    thanks for ya reply but i cant download PGP coz you need to be a us resident coz i tryed last night from the offical pgp sight but it wouldnt let me

    i only download security apps from the authers sight that way i can be confordent that what i get is the real thing and hasnt been tampered with

    unless you know of a way i can download it that im not aware of

    I dont use OE i only use web mail
     
  14. notageek

    notageek Registered Member

    Joined:
    Jun 3, 2002
    Posts:
    1,601
    Location:
    Ohio
    Hi Beth- I'm not sure if you can download PGP from outside the US. But try this web page it has some email encryption on it. I'm not sure if any works with web email. You can try and see what works and don't.
    http://www.staff.uiuc.edu/~ehowes/main.htm





    - Fixed URL
     
  15. Bethrezen

    Bethrezen Registered Member

    Joined:
    Apr 16, 2002
    Posts:
    546
    hi

    you sure thats the right link that didnt go to a software download page
     
  16. LowWaterMark

    LowWaterMark Administrator

    Joined:
    Aug 10, 2002
    Posts:
    17,876
    Location:
    New England
    Bethrezen,

    That URL needed some tags to allow the whole thing to be clickable. Try it again. :D

    Best Wishes,
    LowWaterMark
     
  17. notageek

    notageek Registered Member

    Joined:
    Jun 3, 2002
    Posts:
    1,601
    Location:
    Ohio
    It goes to a software download page and if you scroll down to Net Privacy/ Email Encryption you'll find some links to some encryption software web pages.

    Sorry about not putting any tags in the link I typed the post in a hurry.
     
  18. LowWaterMark

    LowWaterMark Administrator

    Joined:
    Aug 10, 2002
    Posts:
    17,876
    Location:
    New England
    No problem. We've got you covered. :D
     
  19. luv2bsecure

    luv2bsecure Infrequent Poster

    Joined:
    Feb 9, 2002
    Posts:
    713
    I just wrote in another thread about the importance of email encryption and hard disk encryption. Things are changing rapidly and require the use of these tools. The freebies I mention in the sticky post at the top of this topic has some good tools. If you want to spend some money for an excellent on-the-fly encryption utility - try DriveCrypt at www.drivecrypt.com. As for email encryption, the new PGP should be excellent. However, there are, in fact, many good email encryption tools - many free.

    Beth, your initial post kind of veered away from encryption to Proxomitron, which I love, but it isn't encryption. It sounds to me like the program that would be perfect for you is HidePro. It creates very simple self-decrypting files and is extremely easy to use. Take a look at:
    http://www.tihy.ro/eng/index.html

    Good Luck!!

    John
    Luv2BSecure
     
  20. notageek

    notageek Registered Member

    Joined:
    Jun 3, 2002
    Posts:
    1,601
    Location:
    Ohio
    Hi luv2bsecure- I'm using PGP now but some of the people I email don't have PGP. Does HidePro let people encrypt emails to people that don't have Hidepro? Would it be harmful to have 2 kinds of encryption sofware on you system?
     
  21. luv2bsecure

    luv2bsecure Infrequent Poster

    Joined:
    Feb 9, 2002
    Posts:
    713
    Hi Notageek....

    Absolutely! What HidePro does is allow you to turn ANY file into an .exe......By making it an executable, all the receiver must do is open it like a program and put in the password (supplied some other way than email :) ) and the message will appear. It's a free download - play around and you'll see. Strong, reliable encryption too. It's a very nice little proggy.

    As for these two particular programs it's no problem having them both on the same system. In fact, having PGP and Hidepro on the same system would be like having PGP and WinAmp on the same system - they have/use/share no common files.

    John
    Luv2BSecure
     
  22. notageek

    notageek Registered Member

    Joined:
    Jun 3, 2002
    Posts:
    1,601
    Location:
    Ohio
    Cool thanks for the help. :)
     
  23. bubs

    bubs Registered Member

    Joined:
    Apr 28, 2002
    Posts:
    106
    Location:
    Suffolk, England
    Notageek:

    You can use PGP to encrypt to folk who don't have it - create an SDA - a 'self decrypting archive'. End result is just the same as HidePro (and for all I know uses the same algorithm....) :)

    If you right click the file you want to encrypt, you'll see SDA as a choice within the PGP options.
     
  24. Bethrezen

    Bethrezen Registered Member

    Joined:
    Apr 16, 2002
    Posts:
    546
    hi

    i have already tried the hide pro but i don't rally like it to much

    i have also tried all the apps suggested on the pined up topic in this forum to Right now I'm using cryptext coz its small and easy to use and all i need to is click encrypt and type a password and that the end of it

    the problem i see with what you are suggesting is that i would have to send my encrypted message as an attachment to an email but the problem with that is that a lot of my friends will not open attachments which means that sda attachments are no good

    what i need is a way to encrypt my email in such a way so as my friends can open it with my password as in a sda how ever i need a way i can do that with out having to attach the encrypted message if ya get what i mean
     
  25. LowWaterMark

    LowWaterMark Administrator

    Joined:
    Aug 10, 2002
    Posts:
    17,876
    Location:
    New England
    Bethrezen,

    I don't think there is going to be a way to do this... You don't want the people who receive your emails to be required to have any encryption software installed on their PCs, but, you don't want to send them files (executable attachments) that would contain both the decryption software and the encrypted message.

    Encryption and decryption only work via a program of some sort. The receiver must run a program to decrypt your message. That program can either be installed on their system, or contained in the message you send them. But, a program has to be used either way.

    The only other possible idea that I can imagine that would meet these two opposing requirements, (no software installed, and no program attached to the message), would be for the decryption to be done by some online service... Let's imagine for a moment a service, provided by an online email service provider, built-in to their web mail service.

    So, let's ask this question of the experts... Is there an online email service that provides for message encryption and decryption, right through the webmail interface? (It'd be as if Hotmail had an option built-in to encrypt messages.) Has anyone ever used or heard of such a service?
     
Loading...
Thread Status:
Not open for further replies.