security

A trail of 11 pages, marked with comments, by enjoylife
About this trail:

This past week proved that you can't rely on something as simple as a web browser to keep your personal data and identity safe from harm.

Critical flaws were found in the Internet Explorer and even Firefox web browsers, leaving users potentially vulnerable to spyware, viruses, and password-sniffing. But don't throw up your hands in defeat—with the right software tools and a little Advanced Common Sense, you can secure your data so that even if someone did get onto your computer or into your email, they'd find nothing but headaches and woe. Read on for our list of ten software apps and strategies for locking down your online life. Photo by Anonymous Account.

11 marks in this trail
1

This past week proved that you can't rely on something as simple as a web browser to keep your personal data and identity safe from harm.

Critical flaws were found in the Internet Explorer and even Firefox web browsers, leaving users potentially vulnerable to spyware, viruses, and password-sniffing. But don't throw up your hands in defeat—with the right software tools and a little Advanced Common Sense, you can secure your data so that even if someone did get onto your computer or into your email, they'd find nothing but headaches and woe. Read on for our list of ten software apps and strategies for locking down your online life. Photo by Anonymous Account.

2

Remember those invisible ink kits from when you were a kid? You'd write a secret message that no one could see unless they had a black light or the decoder marker. The digital equivalent of invisible ink is steganography software, apps that embed files and data inside other files, hidden from everyone who doesn't know any better.

You don't have to be a trained spy plotting international espionage to put steganography to good use. With some free tools for both the Mac and PC, you can embed secret information in image, PDF, HTML and MP3 files for fun or profit.

4
您收到了文件从一个朋友,但你不确定如果该文件是安全的开放与否。 You launch your AntiVirus program to scan and found no problem with it.您启动您的防病毒程序进行扫描,发现没有问题。 You’re still scared because that friend of yours is very untrustworthy and you know that you can’t 100% trust antivirus programs as they rely on definitions to detect known viruses.你仍然害怕,因为你的朋友是非常不可信的,你知道你不能100 %信任的防病毒程序因为它们依靠的定义来检测已知病毒。 New viruses are growing exponentially every year and it is possible to not have a definition in time to properly diagnose a dangerous line of code.新病毒的增长每年有可能没有一个定义的时间进行适当的诊断一个危险的代码行。 You thought of maybe installing 2 or more antivirus on your computer might give you better protection.你也许认为安装2个或更多的防毒在您的计算机上可能给你更好的保护。 You’re WRONG!你错了! It is advisable to ONLY install ONE antivirus program on a computer because more than that can cause conflicts.最好只安装一个防病毒程序的电脑上,因为超过可能造成的冲突。
5
单击“开始-运行”,在“打开”框中,键入“gpedit.msc”,单击“确定”按钮,打
开“组策略”窗口。在左窗格的“本地计算机策略”下,展开“计算机配置-管理模板-
系统”,然后在右窗格的“设置”标题下,双击“关闭自动播放”。单击“设置”选项
卡,选中“已启用”复选钮,然后在“关闭自动播放”框中单击“所有驱动器”,单击
“确定”按钮,最后关闭组策略窗口
6

To flush/Delete the ARP cache in windows Vista/XP/2003/2000 follow this procedure

Click on Start—>Run—> type the following command click ok

netsh interface ip delete arpcache

Dynamic ARP cache entries update persist for 2-20 minutes depending on the system.

Windows 2003 Server = 10 minutes

Windows 2000 professional/Server = 10 minutes

Windows XP = 2 minutes

Solaris = 5 minutes

Delete IP address using arp command

arp -d

Example

arp -d 10.1.1.2

Display arp table

arp -a

Add static entry to ARP table

arp -s

Example

arp -s 157.55.85.212 00-aa-00-62-c6-09

7
Where to get:
All required packages for OpenWrt-capable routers can be found here and a precompiled privoxy-package here.
8

A lot of people uses the Bittorent protocol to share and download large files. Even though Bittorrent is very fast for exchanging large files, a lot of DVD ISO images takes a long time to download.

Instead of having your computer running, why not let your router download it in the background?

Seti has compiled the Enhanced CTorrent client for OpenWrt. This tutorial will provide installing information, and a little usage information as well.

To be able to follow thisTutorial, you should have GNU screen running as well. Chek out the information in the GNU Screen Tutorial.

 

9

Apache Tomcat and many other Java applications expect to retrieve SSL/TLS certificates from a Java Key Store (JKS). Jave Virtual Machines usually come with keytool  to help you create a new key store.

Keytool helps you to:

  • create a new JKS with a new private key
  • generate a Certificate Signung Request (CSR) for the private key in this JKS
  • import a certificate that you received for this CSR into your JKS

Keytool does not let you import an existing private key for which you already have a certificate. So you need to do this yourself, here's how:

Let's assume you have a private key (key.pem) and a certificate (cert.pem), both in PEM format as the file names suggest.

PEM format is 'kind-of-human-readable' and looks like e.g.

11

Import private key and certificate in Java keystore

It is not possible to import an existing private key for which an certificate is already made. But with the description on this website http://www.agentbob.info/agentbob/79-AB.html it is possible to do this.

An summary of the contents:

Add your comment: