I was drawn to security in the early 90s during the crypto battle against the U.S. government, which was trying to force companies to adopt broken encryption with built in backdoors, like the failed Clipper Chip. Fortunately, the crypto wars were won by the side of reason, not least because of activists hoarding crypto technology in offshore locations. . Today we all enjoy strong, unbreakable, backdoor-free encryption as a result of the 90s crypto battle. That battle is about to begin again as the U.S. government proposes to introduce backdoors, by design fiat, into commercial communications security systems. They were wrong then and they are wrong now but the stakes are much higher this time. In the information age, communication security is paramount. It ensures the secure flow of money in electronic commerce, the free exchange of ideas and the flourishing of democracy, even in hostile regimes. Fortunately, the tools to secure communications are widely available and people around the world have access to strong encryption, unbreakable by any government. Encryption can be found in source code, with open peer-reviewed algorithms that can be implemented in any programming language, embedded in software and layered on top of any communications channel. The cat is well out of the bag. Yet, the U.S. government wants to pursue a futile effort to reverse history, putting the entire Internet in peril in pursuit of an illusion. The link for this article located at Network World is no longer available. . Robust safeguards from the 90s crypto conflicts face jeopardy as authorities advocate for vulnerabilities in digital privacy.. Crypto Wars, Communication Security, Encryption Solutions. . LinuxSecurity.com Team
The GNU Privacy Guard (GnuPG) allows you to encrypt, decrypt, sign, and verify communications and data, as well as create and manage the keys needed for these tasks. It is a full, open source implementation of the OpenPGP Standard (RFC2440) and is integrated into many Linux applications ranging from clipboard applets to instant messaging clients. These applications make it easy to use GnuPG for digital security in the GNOME desktop environment. Most user's don't use any form of encryption when sending information over the Internet. Is the problem that it's not alway easy to use encryption? However, with theses GnuPG plugins user's can easily protect all their Internet traffic without touching the command line.. The link for this article located at is no longer available. . Investigate GnuPG extensions designed to streamline cryptographic processes and bolster confidentiality in online interactions.. GnuPG Plugins, Digital Security, Encryption Tools, Open Source Privacy Tools. . LinuxSecurity.com Team
You may not always be able to protect your laptop from a thief, but you can keep the data it contains safe. Two new products -- PGP Corp.'s PGP Whole Disk Encryption 9.5 and SecurStar GmbH's DriveCrypt Plus Pack 3.5 -- promise to protect your data, so that even if your computer falls into the wrong hands, its contents will remain unreadable. Both applications are easy to use and offer an impressive suite of tools, but most users will appreciate the more practical features and lower price tag of PGP's product. Both PGP and DriveCrypt offer on-the-fly, full-disk encryption, which means that they scramble all the data on your hard drive the moment you save it to disk. Both use the AES-256 algorithm, a fast, well-established and trusted mechanism for encrypting data. . Both protect a computer from the minute it's powered on, and give you a single sign-on so you have to enter your password only once per session, when you boot the PC. The initial setup for both applications -- creating an encryption key and telling the software which partitions you want to protect -- takes just a few minutes. Once that's done, you can open, change, save and close files as you normally would, and the software does all the work. Most important, the programs do their job quietly in the background and have no noticeable impact on day-to-day system performance. The link for this article located at ComputerWorld is no longer available. . Explore Veracrypt and BitLocker, two robust disk encryption solutions designed to protect your computer’s information from unauthorized access.. Disk Encryption, Data Security, Laptop Protection, Encryption Solutions. . LinuxSecurity.com Team
During the past two weeks, I started up a disk encryption project, one of the technology initiatives under my company's intellectual asset protection program. Our goal with the disk encryption effort is to prevent the loss of intellectual property stemming from the theft of a laptop. On several occasions, executives' laptops have gone missing or been stolen. One of those missing laptops contained intellectual property and sensitive data, including information on a pending acquisition, product strategy and road maps. Luckily, it was recovered. . Should something like that happen again, we want the data on the laptop's hard drive to be illegible, which means we have to encrypt the entire hard drive. I assembled a team of representatives from our help desk, Windows engineering and Web applications groups and my information security team. After the initial project meeting, which familiarised everyone with the scope of the project and the state of the technology, we considered three products: Microsoft’s Encryption File System (EFS), PGP’s Whole Disk and Pointsec Mobile Technologies' Pointsec for PC. The link for this article located at TechWorld is no longer available. . Should something like that happen again, we want the data on the laptop's hard drive to be illegible. during, weeks, started, encryption, project, technology, initiatives. . LinuxSecurity.com Team
GnuPG, the GNU Privacy Guard, is the open source equivalent to PGP, or Pretty Good Privacy, which has been available for Windows, DOS, and some other operating systems for many years. It has all the same features, based on the OpenPGP . . . . GnuPG, the GNU Privacy Guard, is the open source equivalent to PGP, or Pretty Good Privacy, which has been available for Windows, DOS, and some other operating systems for many years. It has all the same features, based on the OpenPGP standard. The uses for GnuPG (or GPG) are varied: It can be used to encrypt email messages and files, or to digitally sign email messages and files. The first use is obvious, encrypting emails or files on your hard drive maintains the privacy and integrity of sensitive messages or documents. The latter is extremely useful to maintain the integrity of messages and files, especially when transmitting over insecure networks. It certifies that a) the email was sent by whomever claims to have sent it, and b) that a file has not been tampered with. Using GPG is very easy and straightforward. It is a text-based command line tool, but there are frontends to GPG that make it even easier to use. The whole premise of GPG is PKI, or Public Key Infrastructure. What this means is that GPG is based upon a two-key system, a private key used to sign and decrypt, and a public key used to decrypt and verify. The link for this article located at MandrakeSecure is no longer available. . GnuPG, the GNU Privacy Guard, is the open source equivalent to PGP, or Pretty Good Privacy, which ha. privacy, gnupg, guard, source, equivalent, pretty, which. . LinuxSecurity.com Team
Last weekend's CodeCon conference in San Francisco saw the launch of Tinfoil Hat Linux, a self-proclaimed "exercise in over engineering" and security. What started out as a secure, single floppy, bootable Linux distribution for storing PGP keys, and encrypting, signing and . . . . Last weekend's CodeCon conference in San Francisco saw the launch of Tinfoil Hat Linux, a self-proclaimed "exercise in over engineering" and security. What started out as a secure, single floppy, bootable Linux distribution for storing PGP keys, and encrypting, signing and wiping files, turned into a useable Linux distribution for the totally paranoid. The homepage for Tinfoil Hat Linux claims that the distribution is effective if customers are using a computer that could have a keystroke logger installed, or if they need to use personal PGP keys at work, school or at a web hosting facility where they don't trust or own the equipment. The link for this article located at vnunet is no longer available. . Aluminum Shield OS debuted at TechFest focuses on heightened safety and confidentiality for individuals requiring secure settings.. Tinfoil Hat Linux, Privacy Protection, Encryption Tools, Secure OS, CodeCon. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.