Guymon

Digitale Privatsphäre (an US Grenzen) schützen

Die EFF veröffentlicht einige Hilfestellungen für den Schutz der eigenen Privatsphäre an US Grenzen.

Auch wenn man nicht plant in die USA zu reisen ist das Dokument lesenswert, da es eine Reihe von Hinweisen gibt die nicht nur an US Grenzen die Privatsphäre schützen.

Off The Grid Password Generator

Off the Grid von Steve Gibson ist ein spannender Ansatz für das “technologiefreie” Generieren von Passwörtern.

We designed this “Off The Grid” system to provide Internet users a uniquely and provably secure alternative to simply hoping that malicious software hasn’t, or won’t, infiltrate their personal password keeper, online password storage system, on-the-fly password generator, computer-hosted password storage vault, or whatever convenience technology is being employed to generate and/or store the passwords used to authenticate the user’s identity to remote Internet websites.

“Off The Grid” converts any website’s name into a secure password that you never need to write down, store, or remember because you can easily re-create the same secure password from the same website name the next time, and every time, you need it.

Ich denke darüber nach meine Passwörter mit diesem System zu erstellen und in 1Password zu speichern. Sollte 1Password eines Tages mal nicht mehr verfügbar sein könnte ich noch immer alle Passwörter wiederherstellen oder wenn ich nicht an einer eigenen Maschine sitze…

Stegobot

Spannend:

We propose the construction of an unobservable communications network using social networks. The communication endpoints are vertices on a social network. Probabilistically unobservable communication channels are built by leveraging image steganography and the social image sharing behavior of users. All communication takes place along the edges of a social network overlay connecting friends. We show that such a network can provide decent bandwidth even with a far from optimal routing mechanism such as restricted flooding. We show that such a network is indeed usable by constructing a botnet on top of it, called Stegobot. It is designed to spread via social malware attacks and steal information from its victims. Unlike conventional botnets, Stegobot traffic does not introduce new communication endpoints between bots. We analyzed a real-world dataset of image sharing between members of an online social network. Analysis of Stegobot’s network throughput indicates that stealthy as it is, it is also functionally powerful — capable of channeling fair quantities of sensitive data from its victims to the botmaster at tens of megabytes every month.

Technology Review hat auch etwas darüber.

GPRS-Verbindungen abhörbar

Wie die New York Times berichtet hat Karsten Nohl einen Weg gefunden den GPRS-Datenverkehr im Umkreis von bis zu 5 Kilometer zu belauschen.

A German computer engineer said Tuesday that he had deciphered the code used to encrypt most of the world’s mobile Internet traffic and that he planned to publish a guide to prompt global operators to improve their safeguards. (…) In Germany, Mr. Nohl said he was able to decrypt and read data transmissions on all four mobile networks — T-Mobile, O2 Germany, Vodafone and E-Plus. He described the level of encryption provided by operators as “weak.”

crypto.cat

Keine Ahnung ob das was taugt, klingt aber ganz hilfreich wenn man es eilig hat, oder nicht viel technisches Know-How mitbringt.

cryptocat lets you set up encrypted, private chats for impromptu secure conversations. check out this video for tips on how to get started!
your messages are encrypted before leaving your computer using AES-256 and are verified for integrity. all conversations are securely wiped after 30 minutes of inactivity.
cryptocat is fully compatible with Tor for anonymous chatting. couple cryptocat with Tor anonymization for maximum confidentiality.