TrueCrypt

TrueCrypt is a powerful, free, open source program that allows you to create encrypted volumes on your computer, or to encrypt entire disks, including your system disk. Furthermore, it allows you to create hidden volumes, or even an entire hidden operating system.

Proper computing practices can usually keep people from attacking your system remotely, but there’s still a high risk if they gain physical access to your computer or your drives. Encryption programs such as TrueCrypt render the actual stored data unreadable without the proper key, making it difficult to even determine which parts of the encrypted disk hold data and which hold random gibberish. This imposes very few limits on ordinary system use, as modern encryption software is extremely fast and performs on-the-fly encryption and decryption with a very minimal speed hit.

TrueCrypt can be used by anyone, but it sometimes delves into technical terms. The documentation is very extensive, however, and should be understandable to anyone who is in a position to use or need this kind of software.

There are two modes of using TrueCrypt. The first, the easiest for most users, is to create an encrypted volume as a file on an existing disk. This requires a good chunk of free space, though that depends on how much you want secured–if it’s just a few Excel files or the like, you can make a very small volume; if it’s extensive archives, you will need a lot more space. Once the file is created, it can be mounted like any other Windows disk, and files can be read from it and written to it. All programs just treat it like a normal drive: The TrueCrypt drivers intercept all read and write requests, processing the data transparently.

Without the password (and/or a key file), no one else can mount that volume, and anyone who copies the encrypted volume will just have random bytes. (Usage tip: This doesn’t apply if they can access your system while the volume is mounted and the decryption is running; they will then see the files just as you do. So keep your firewall secure and if you’re in a shared environment, set TrueCrypt to dismount shared volumes after inactivity.)

The second mode is full-volume encryption. This can be a non-system partition, or you encrypt your system drive. Doing the latter provides the maximum in security, since it means that all of the things Windows stores without your knowledge, such as system restore points, temp files, and other clutter, will also be encrypted. It also means that if you ever forget your password, you cannot boot your computer.

TrueCrypt will insist you make a recovery CD in the event that the boot level drivers on the encrypted disk become corrupt, but use of the CD still requires you to know the password, and there’s no way to recover or reset the password if you’ve forgotten it.

TrueCrypt

[Computer World] via [HackInTheBox]

Free Internet Security Tools

Criminals have gotten pretty good at making fake Web sites (for PayPal, eBay, Facebook, etc.) look like the real thing. But what they can’t fake quite as easily is the location of the Web server that’s hosting their fradulent site. You might be looking at a perfect replica of, say, Bank of America, but if the site is hosted in Uzbekistan, it’s a good bet you shouldn’t input your password. Read “Seven HInts to Stay Safe Online” for details on this sort of scam, and some ways to protect yourself.

Flagfox for Firefox makes the necessary detective work simple: it determines the Web server’s physical location and pastes the corresponding country’s flag at the end of the address bar. Clever!

If you’re wondering how it works, Flagfox bases its flag choice on the actual location of the server you’re connected to, rather than just the nationality of the domain name–which may be different.

After installing the plug-in and restarting Firefox, just head to any site and you’ll see the flag at the right end of the address bar. If you click the flag, you’ll get a new tab containing detailed geographic information about the site.

If you right-click the flag, Flagfox pops up a list of other handy tools, including Whois, SiteAdvisor, Web of Trust, and URL-shortener bit.ly. Head to the settings (via Tools, Add-ons) for the plug-in and you’ll find a dozen or so other options you can add to the list.

This is a great little addition to Firefox, one that combines convenience with added security. What’s not to like?

Keep Your PC Insulated from Internet Threats with Free BufferZone Pro

Most security tools leap into action only after they’ve detected a threat–and sometimes that’s too late (especially if the threat is one that’s new and unknown).

The only way to really stay safe while you’re online is to work inside a virtual environment–a kind of protected bubble (aka “sandbox”) that operates on your PC but isn’t directly tied to it. Trustware’s BufferZone Pro creates exactly that kind of protected bubble, thus offering a unique (and theoretically impenetrable) level of protection.

BufferZone Pro originally sold for $40, but Trustware has decided to offer the software free to home users.

The software’s virtual environment isolates security threats and prevents them from ever touching your PC. With it you can safely download, install, and run any application without worrying about Trojan horses, worms, keyloggers, spyware, Adware, phishing attempts, or other computer-clogging malware.

This newly free Pro version includes support for USB devices (flash drives, etc.), P2P file sharing, all instant-messaging programs, and personal files (which get stored in a confidential folder). And unlike many security tools, BufferZone Pro isn’t subscription-based, meaning you won’t get hit with a $40 bill a year from now. It’s free, period.

[ComputerWorld] via [hackinthebox]