Background of Password cracking

Filed under:Internet Security Resources — posted on December 22, 2007 @ 2:12 am

Passwords to access computer systems are usually stored, in some form, in a database in order for the system to perform password verification. To enhance the privacy of passwords, the stored password verification data is generally produced by applying a one-way function to the password, possibly in combination with other available data. For simplicity of this discussion, when the one-way function does not incorporate a secret key, other than the password, we refer to the one way function employed as a hash and its output as a hashed password. Even though functions that create hashed passwords may be cryptographically secure, possession of a hashed password provides a quick way to verify guesses for the password by applying the function to each guess, and comparing the result to the verification data. The most commonly used hash functions can be computed rapidly and the attacker can do this repeatedly with different guesses until a valid match is found, meaning the plaintext password has been recovered.

The term password cracking is typically limited to recovery of one or more plaintext passwords from hashed passwords. Password cracking requires that an attacker can gain access to a hashed password, either by reading the password verification database or intercepting a hashed password sent over an open network, or has some other way to rapidly and without limit test if a guessed password is correct. Without the hashed password, the attacker can still attempt access to the computer system in question with guessed passwords. However well designed systems limit the number of failed access attempts and can alert administrators to trace the source of the attack if that quota is exceeded. With the hashed password, the attacker can work undetected, and if the attacker has obtained several hashed passwords, the chances for cracking at least one is quite high. There are also many other ways of obtaining passwords illicitly, such as social engineering, wiretapping, keystroke logging, login spoofing, dumpster diving, timing attack, etc.. However, cracking usually designates a guessing attack.

Cracking may be combined with other techniques. For example, use of a hash-based challenge-response authentication method for password verification may provide a hashed password to an eavesdropper, who can then crack the password. A number of stronger cryptographic protocols exist that do not expose hashed-passwords during verification over a network, either by protecting them in transmission using a high-grade key, or by using a zero-knowledge password proof.

David and his team developed Article Post Robot, www.articlepostrobot.com, the software which can post articles to hundreds of article sites and mail lists automatically. Demo is available upon request at help(at)articlepostrobot.com

Protect Your Home with Spy Camera

Filed under:Internet Security Resources — posted on December 1, 2007 @ 6:05 pm

With the crime rate on the rise so too is the fear factor of the common consumer on how to protect themselves from lawsuits, fraud, and burglary. Fortunate it is that technology has taken such a sharp upward trend to introduce so many security devices to monitor and protect the consumer.

One of the most popular devices that has come down drastically in price is the Spy Camera. The spy camera use to be a figment of your imagination that was in shows such as Star Trek and James Bond. Now it is a reality with pen cameras, pin cameras, cameras hidden in sun glasses even. For as little as $250 you can buy an entire kit that will use sensors and even remote Internet access with alarms. You have the possibility of hooking your house wide camera systems to the cable system and watching the cameras on any screen in your house on a certain channel.

On top of spy cameras you have a whole range of devices to protect yourself and your property. Trip wires, motion sensors, window and door detectors/alarms, cameras, spy camera, vaults, digital locks, finger print locks, and more. Everything is at an affordable price, the most expensive price would be to have a professional come in and install the equipment which can easily cost a few thousand depending on the size of your home.

If you are looking for an easier solution with a low budget, we can assist you in this. I will detail a simple system that will help to deter burglars. First, solar panel motion sensor lights. It would be helpful to put one in front and back. Second, use two hooks and one 2×4 to barricade the garage door at night.

Most burglars will enter through your garage since this is the most unprotected and commonly left unlocked. Place alarm stickers on the front door as a spoof to scare anyone away. Lastly, you can get simple alarms that you can connect to your door or window and with a switch hear when it opens with a bell or alarm.

These are very cheap items and can be installed in as little as 45 minutes. Consult an alarm company for more help and to see local prices on professional systems.

Installing Spy camera is great way to protect your valuable asset with affordable price, explore more Spy Camera and Video Surveillance Equipment at http://www.superior-video-surveillance-camera.info

Protect Your Privacy by Erasing Tracks Left on Your Computer

Filed under:Internet Security Resources — posted on November 17, 2007 @ 9:39 am

When you browse the web information is continuously collected by the websites you visit and by your own computer. For example, websites at a minimum collect information about the web browser you use the operating system of your computer and the geography you reside from. However, what surprises most users is the amount of information that is collected on your computer from your surfing habits and daily use.

Your web browser stores a lot of different types of information which is designed to improve your internet surfing experience but nevertheless poses a privacy risk. The sites or URLs which you visit are stored in the browser’s “history.” Search results are saved when you enter a search term into a search engine like Google. Web content and images are stored in the “temp” folder. Files that you download are stored in the download manager.

Websites also place “Cookies” onto your hard drive. A cookie is a small text file and is used by websites to offer advanced features. Some of the information that cookies store include shopping basket items or log-in information for a membership site. Cookies can also store information about when you visited the site including date and time.

Given all this information being collected above you can easily see why this could become a privacy risk. It would not take someone who knew what they were doing too long to figure out what websites you visit, what you have bought online and what search terms you are looking for. This is unfortunately not the end of it.

If you are a user of instant messenger or chat programs like AIM, MSN Instant Messenger or even Skype then it is important to be aware that the programs saves your chat history. Most programs allow you turn this feature off.

There are number of other places besides your web browser where information is stored on your computer. This data can allow people to figure out what you have been doing on your computer. Media players like RealPlayer and Microsoft Media Play store audio and video playing history. Microsoft Office like Excel and PowerPoint applications store information about the most recently accessed files.

Another important thing to remember is that when you delete a file it is not necessarily permanently erased and can be recovered with the right software. When you first hit delete the file is moved to the Recycle Bin. Even when you empty the Recycle Bin the file still exists on your hard drive until Windows overwrites it.

Here are two things you can do to help reduce the privacy risks from your computer.

- Use a free software tool called “CCleaner” (http://www.ccleaner.com) to clear information collected by your web browser and Windows’s Temp Folder. This software automates the manual process of using your browser options menu to clean out cookies, URL history etc. Try to run this tool once a week or more frequently if you are a heavy internet user.
- If you work with sensitive data files on your computer then you may want to consider investing in secure file “shredder” software. This type of software actually overwrites or “bleaches” the file you want to delete which means that it cannot be restored.

Richard Rogers runs a number of computer-related sites offering Spyware Remover and Anti Virus Software help.

Estate and Mega-Yacht Security Systems and Safe Rooms

Filed under:Internet Security Resources — posted on November 13, 2007 @ 2:51 am

Why do I need a “safe room? I really don’t need one; I’m not that high profile”. This is typical V.I.P. client frame of reference or attitude concerning security systems and safe rooms.

What most clients don’t realize is “being high profile” has a definite impact on vulnerabilities, however, not being high profile does not mitigate the vulnerabilities and overall exposure caused by their “lifestyles” and “net worth”.

Firstly, security systems are usually designed and installed by security system companies.
The salesperson of the vending company is primarily interested in selling the highest dollar components and system. The viability of the system is usually important but not usually paramount to their operational concerns. The clients usually are persuaded to purchase the “high end” version of systems and usually get very good systems.

Secondly, what they do not realize is they would have benefited immensely from the use of the services of a quality security consultant, who would have been savvy of security system requirements and the needs specific needs of the client.

The experienced security consultant can save the client thousands of dollars in unnecessary expense on hardware and re-direct hardware expenses in the direction of need and viability. This having been said, there are other issues that are unknown to the clients. In addition, these other issues are also not first and foremost in the minds and focus of many security system vendors.

One of these issues is the concept of security system redundant layering. The most effective systems are layered with detection device systems after detection device systems, all integrated into one intrusion detection system. Not to get into too much technical detail, the idea or concept is to set up mantraps and detection device systems that will back each other up and eventually detect and catch the intruder.

The typical estate or residence burglary scenario: an intruder gains access to your residence or estate, the police typically do not respond quick enough to prevent an intruder from coming face to face with an occupant. The result is an unwanted tragic event will usually occur.

Another issue is the concept of the “safe room”. Most clients do not realize and most vendors do not stress the value of the “safe room” We are not talking about the Jodie Foster movie, the “Panic Room” We are not alluding that all estates and mega-yachts need internal, concrete and steel fortified sanctuaries. Far from that. Safe rooms do not have to be these ultra, internal fortresses. ‘Safe Rooms’ can be designed and constructed at various levels of security. They can be minimally reinforced and impregnated with ballistic materials. They can also be designed to achieve the highest levels of security, where the room is totally protected from exterior access and is constructed with steel reinforcements, ballistic materials and a door constructed by a “vault” manufacturer. This highest level of protection is routinely equipped with a separate AC system, security CCTV monitors, survival supplies, oxygen and a back up communications systems.

Essentially, the primary focus of a viable and efficient Security Intrusion Detection System (alarm system) should be to warn and provide occupants of your estate, mega-yacht or home with sufficient time to access a ‘safe room’ and avoid confrontation with an intruder. True, although many people simply regard an alarm system as a deterrent, it should be also, at the same time, a warning system, allowing you and your loved ones ample time to access your ‘safe room’. In order to facilitate a safe outcome, it is vital to ensure quick and easy access to a safe location (‘safe room’) and to remain secure until the police or security detail respond.

The bottom line - police response time and access to your ‘safe room’ play critical roles in determining a positive outcome during a break-in or intrusion.

Proper planning and the use of a highly qualified security consultant will provide clients with the optimum result and more than likely, save hem unwarranted expense. The consultant can work closely with the client’s architect or builder to review preliminary designs in order to pro-actively implement design changes and modifications before construction or renovations are initiated. This involvement routinely ensures the implementation of the appropriate technical and physical security countermeasures.

In conclusion, the client should wind up enjoying the safety and security of a viable intrusion detection system incorporated with the added feature of the safe room.

Mr. LaSorsa manages J.A. LaSorsa & Associates, a South Florida based security consultancy and investigative firm. He provides: asset and executive protection, corporate security consulting, expert testimony as it relates to premises liability & security negligence; anti-wiretapping, safe rooms & security systems consulting, event and tour security & investigations; workplace & school violence intervention, threat & vulnerability assessments.

Joe has over twenty-nine years of experience in the security field, which includes a twenty-year career as a Senior Special Agent with the United States Secret Service, Presidential Protection Division, the White House and extensive senior management private sector experience. Contact info: Telephone # 954-783-5020 or e-mail: jal@lasorsa.com or by visiting: http://www.lasorsa.com

I Don’t Remember Ordering This! 3 Basic Steps to Prevent Online Email Fraud

Filed under:Internet Security Resources — posted on November 4, 2007 @ 12:37 am

What do you do if you have received a suspicious email from a reputable company that you often do business with? Many online users are finding their inboxes packed with strange messages from Ebay, PayPal, their banks, credit cards, and even schools and hospitals. If you are receiving requests for information or further action that you don’t feel comfortable with, use the steps outlined below to help sort out the spam.

1. Don’t click it, use impressions - Impressions are used to tell the link location of an item without clicking through. A link in the body of a text email may look reputable at first. But if you wanted to see where the link will take you without clicking, just point your cursor over the word and the location will show up at the bottom of your brower window. If you don’t see anything at the bottom of your browser window, then your window may not be maximized (opened as large as it can.) Click the Box in the middle of the three icons at the top right-hand corner of your screen. (There should be one to minimize, open full screen, and close or X). If the link starts with anything other than the source it claims to be, don’t click. For example an Ebay buyers warning may say that it is from Ebay, but when you check the impression, it may say that it is from http://sales.site.XX.hpgjs (not an official ebay site.)

2. Don’t reply - This is self explanatory. Replying to the message lets the sender know that you are out there, and checking your emails. Since they are randomly spamming millions of emails (not knowing which emails are still in use), replying is an invitation for more trouble. While it is tempting to let them know that you don’t appreciate the emails, this will only encourage more activity. If you have a yahoo account or something similar, you can hit the “This is spam” button, and it will send it to the trash and flag the sender as a spammer.

3. Don’t unsubscribe - This is for reasons similar to above. If they offer a link to remove you from further mailings, they are wanting to know that you are an active user. Don’t take the bait.

The moral to the story is that if you are in doubt, you can do without. If you just can’t let the email go without taking some action, call your bank or other institution and verify that the request is bogus. And just remember that they aren’t picking on just you. The senders of fraudulent email send out millions of emails a day, it’s nothing personal.

Linsey Knerl is a writer and homeschooling mother of three who enjoys parenting and all of life’s blessings with her husband in rural Nebraska. Her work can be see at http://www.LinseyBKnerl.com

Danger: Scam Zone

Filed under:Internet Security Resources — posted on October 9, 2007 @ 2:37 pm

The days of being safe on the internet has never existed. What’s worse is the fact that through all the safety precautions that you do take, you still can get caught up in a scam. It’s also been said that the internet is less safe now than it was a year ago.

You average person on the internet may be honest to a certain extent. The problem is the excitement of quick riches. Some of the more experienced marketers, shoppers, or computer gurus may be able to detect some dangers. Not all dangers can be eliminated.

If you haven’t been stung, you will be. It’s not a question of if, but when. The severity of that sting is what’s most important.

It should be the duty of every internet shopper, guru, and marketer to report scams, phishing, chain letters, and ponzi schemes.

I’ve personally witnessed people clicking on email links because of a warning. I see pop-ups come up all the time with warnings that are not part of your computer just so that it’ll go to the persons’ email address that made this pop-up.

If you click on a pop-up, you must be made aware that some people claim that to be a permission to email you. You may not even be aware of it.

I’ve spoke to several clients of mine about the dangers of the internet. Their response was: “I have a virus protector.”

Having a virus protector, a spam blocker, a pop-up blocker, and every piece of software on the market will not save you from your own enthusiastic approach to getting rich if you believe it takes no work. Now that was a long sentence. Sorry.

I’ve been on the internet since 1994 and have spent countless thousands of dollars finding scams, making mistakes, and still get scammed here and there.

Have you heard of people filling out surveys? It is my opinion that if you participate in some of these surveys, you will give the provider all the information necessary for them to steel your identity. Now bare in mind, I know some people that are making money filling out surveys. I’ve even been told that “survey scout” is the most respected of all survey opportunities. However, they just lead you to the data base or surveys.

Here is something you should think about. How many people do you know that has your name? Now, how many people were born on the same day as you with that name? With these two pieces of information, and the technology we have today, I’d be very reluctant to giving my birth date out.

To take this another step: What do you think could happen if you type your information into a survey that asks for your name, birthday, home address, how many people live with you, the ages of your children, and even your social security number.

You’ve just opened up the door for that information not only being available to everyone with cash but also to a scammer.

You see, the dangers of the world may not be guns anymore. It may be our own self destruction.

The information highway may be the most dangerous tool around if used improperly. Again, the most honest people around unknowing participate in scams, ponzi schemes, and chain letters hoping to gain riches.

I’ve even found more scams than I can count in my marketing target. I love health benefits, weight loss, and fitness. Now in reality, you should not fall for anything that promises you that weight loss can be achieved by eating anything you want without one small calculation. Calories in minus calories out determines your weight.

Of course I could be wrong. I still believe in what I’ve sold.

Good luck,

Randall Stafford

Randall Stafford has taken a serious role in the marketing field the last couple of years and has definitely had some ups and downs.

He has several web sites with the main focus on http://www.twincitymarketing.com

Web Site and Network Stress Monitoring

Filed under:Internet Security Resources — posted on October 2, 2007 @ 10:39 pm

In today’s world, organizations are fast accepting the web and related applications as part of their overall business strategies. They understand that the Internet provides them with the potential to target a very focused set of customers spread across a very diverse geography.

For a successful Internet presence, it is important that the web server and web applications are reliable, scalable and always available, irrespective of traffic volumes to the site.

To achieve this, you must test all your hardware and software using tools to check your web site, usually called web stress tools. These tools should ideally be used even before the site is on the World Wide Web. They can provide a reasonably good estimate about the performance of your web site and a company can identify issues before they arise.

Such issues might include slow response times while opening the web site, a limited number of users able to simultaneously browse the web site, or a cap on the number of requests that can be handled by a processing application. Based on the results, a webmaster can identify the bottlenecks and take corrective actions before they result in lost sales.

What does web site stress testing do?

Web stress testing provides performance reports for varying elements. For example, users might be complaining that your shopping site is taking ages to load and most search results are showing errors message. Using a web stress tool, you can check the performance of your web server. To your surprise, the CPU utilization on the Server may be just 20%. But if you are also monitoring the database application, you might find that it is already running at 100% and is the most likely reason for poor performance.

Stress tools can be deployed as software solutions where you can monitor the key components of your servers such as the CPU, memory and hard disk utilizations. They are built with user-defined alerts that can be triggered if a particular parameter crosses a threshold set by the user. As an example, you can configure an alert that must be generated whenever the CPU utilization crosses the 80% mark. Although this is helpful in identifying system bottlenecks, the results are limited to web servers that are connected to your internal network.

Why a stress monitoring network?

If the target audience is across the globe, or even across the country, a company needs to monitor its web site and applications stress loads from different locations across the globe. The web server must provide reasonable performance from wherever customers are located. In such a situation the software solution is unlikely to meet the company’s requirements.

Organizations must use external web site stress monitoring tools, which provide detailed performance reports on servers that are tested from different locations. The outcome of these tests can help in fine-tuning the settings at their ISPs and in optimizing performance of the servers. Besides this, external stress testing also include monitoring of other network infrastructures that connect to the web server, such as routers, firewalls and leased lines that provide the back-end connectivity.

This is why Dotcom-Monitor’s load stress test tool offers its clients stress test agents located in various countries such as the USA, UK and Germany. This service provides performance data about the web site from these and other locations spread across the globe.

So if you run a business on the Internet, it is important that your web site and all associated web applications perform to their optimum levels. They handle transactions quickly and in turn offer faster response times to your user requests. Using web stress services you can get information you need to ensure superior throughputs and gain a reputation for high-performance dependability among your customers.

Vadim Mazo is CTO of the Dotcom-Monitor web site monitoring network, with more information about web site monitoring. David Leonhardt is a Canadian web site marketing consultant and a self-help books author.

E-mail Signature As A Security Tool

Filed under:Internet Security Resources — posted on September 30, 2007 @ 10:37 am

Most organizations over look this very important security tool.
How can an organization or an individual verify the authenticity of an in coming
mail? Attaching a signature to your mail should be a standard practice.
Your E-mail Signature is an electronic business card and as such is a very
important security tool in e-mail verification.


Here is a sample of an e-mail signature

<+++++++++++++++++++++++++++++++++++++++++++++>

Customer Consideration Ltd    info@customerconsider.com

http://:www.customerconsider.com

No 20 Ibadan Road, Opposite Yemi Book Shop,

Kaduna, Nigeria, West Africa.

GSM:, Tel No:

We Sell Affordable Baby Clothes

<+++++++++++++++++++++++++++++++++++++++++++++>
 

This is an example. The design of the e-mail signature is based on choice.
The e-mail signature must contain the following;

All the ways by which your organization can be contacted; phone numbers, fax number, mailing address, e-mail address, url address.

The particular designation of the individual or the department’s name sending the mail. Example if it’s the CEO of a bank it should be stated.
ceo @ xyzbank.com

Every e-mail address must have an e-mail signature.
Example ceo @ xyzbank.com

info @ xzybank.com
Each e-mail address should have an e-mail signature.

The organization’s logo and slogan should also be added.

As A Weapon Against E-mail Fraud
A mail stating that, they must not honor any mail not containing the attached e-mail signature must be sent to all clients. A copy of all e-mail signatures must be forwarded to the company’s lawyer.

How Do You Set Up An E-mail Signature
All standard e-mail programs come with the ability to set up an e-mail signature. The e-mail programs also give you the option of attaching the e-mail signature to every outgoing mail.

Advantages Of E-mail Signatures
Any Organization or Individual, claiming to have received a fraudulent mail from a well established organization, should be made to send a copy of the fraudulent mail for verification. Once the e-mail signature is not attached to it. The lawyer can always sue for name defamation, if the said organization is not aware of the company’s e-mail signature.

Advice:
In information security, the little things we over look counts. How many companies in Nigeria are aware of e-mail signatures?

A copy of the e-mail signature or signatures must be registered with the appropriate copyright organization.

Website development must be accompanied by an it security consultant.
Recently a disclaimer Advertisement was placed in one of the widely read newspapers stating “scams involving illegal reference”.

The question now is, how can people identify legitimate mails?

Christopher Okoh
CEO
Computer Security & Network Associates
Website:http://www.compsana.com

Regain Internet Privacy from Spyware

Filed under:Internet Security Resources — posted on September 27, 2007 @ 3:19 am

The majority of computers connected to the internet today are infected with some sort of spyware. The prevalence of internet use has made the growth of spybot, adware, spyware, Trojans, keyloggers and other malware fast and easy.

Each form of surveillance software invades users’ privacy through numerous methods so they can gather information about people’s internet and computer activities. Users must learn to deny spyware access or remove any current infestations in order to maintain a private internet experience.

The consequences of spyware can include identity theft, loss of system control, PC slow downs, pop up ads and browsers crashes. Without a spyware removal tool you are continuing to invite spyware in to invade your privacy. Your anti-virus and firewalls cannot catch most spyware applications because they are installed by piggybacking in on legitimate downloads that you approve such as freeware programs as well as music and game software.

Once on your computer the spyware works silently, beyond the user’s knowledge to gather private information. Spyware and adware software are stealthily embedded in your system, making them difficult to remove manually, which is why it is vital for internet users to find a spyware scanner. Spy scan tools search through the hard drive for spyware infected files. It then removes the detected files so your computer can be restored to it normal working capabilities. Several spyware tools
actively protect you from spyware infections while you are working online.

Mitch Johnson is a successful freelance author that writes regularly for http://www.1st-in-remove-spyware.com/, a site that focuses primarily on spyware detection software, as well as tips on how to avoid spyware from popping up on your computer. His articles have also been featured on related spyware sites such as,
http://www.best-in-spyware-detection.com/ as well as http://www.best-sypware-removal-reviews.com/

Evaluating Your Home Security Needs

Filed under:Internet Security Resources — posted on August 30, 2007 @ 9:30 am

Home security is one of the most important considerations for any homeowner. After all, feeling safe and secure in your home is vital, no matter where you live. Keeping yourself and your family safe is your responsibility, and it is important for every homeowner to periodically evaluate the security level of his or her own home.

There is, of course, no home security system that is completely foolproof, and a determined burglar can sometimes foil even the most sophisticated alarm system. However, a good home security system can cause those burglars to bypass your home in favor of easier prey.

The first part of evaluating the need for home security is to take stock of the area in which you live. If you live in a high crime area, it is probably a good idea to set up a multi-layered home security system, including security lighting, strong locks and a good home security system. Even if the crime rate is low where you live, however, it is important to create a home security plan to keep yourself and your family safe.

It is also important to remember that no security system will work without the diligence of the homeowner. Even the fanciest and most secure locks will do you no good if you neglect to lock them. Even the best home security system will be worthless if it is left turned off. It is important that you and your family take the security of the home seriously, and that every adult in the home knows how to work the security system.

When evaluating your home for a home security system, it is important to try to see the home through the eyes of a burglar. Of course, most of us are not criminally inclined, and this may be difficult to do. The key is to look at your home with a critical eye. Take a look at the exterior lighting of the home. Is the home well lit, or are vast areas of the exterior dark. Burglars and other criminals can easily hide in those dark spots around your home, and good lighting is the cornerstone of any home security system.

Good lighting is also important for making the home look occupied when you are away. It is important to leave lights on when you are away, but the home security or lighting system should also be capable of turning lights on and off, just as would happen if you were home. Lights that come on and go off at the same time every day is a sure sign that the occupant is away and that the home is rife for the picking. There are many excellent timers on the market that can be used to turn lights on an off according to the schedule you set.

Brooke Sikula is a freelance writer based in Ventura, CA and writes on a wide range of topics from home improvement to credit repair and everything in between. She is a regular contributor to http://www.home-improvement4u.com and http://www.get-home-improvement.com For more information and advice on home security, check out http://www.home-security4u.com


next page