1/10/10

Secure File Deletion and Data Shredding

One of the many misconceptions about file deletion is the fact that files can be recovered even if they are deleted on the computer system by the user. Deleting files normally moves them to the recycle bin from where they can be recovered easily. But even deleting them in there or pressing the Shift key during deletion will not remove the file completely from the computer system. The Windows operating system for instance will only enable write operations on the data sector the file was stored in. This means that file recovery tools can recover these files with chances being better the less time has passed since the deletion and recovery attempt.

Delete On Click is a very straightforward security software program for the Windows operating system. It adds a Delete On Click entry to the Windows Explorer context menu that can be used to delete files securely on the operating system.

The security software will delete the file completely so that no traces of it are found on the hard drive where it was stored. The method that is used to delete the files securely is unfortunately not revealed by the developers of the security software. Tests with file recovery tools did not display the deleted tests files when deleted with the Delete On click program.

Delete On Click is a free download that is available on the developer’s website.

Check File Integrity With HashTab

File integrity and authenticity software HashTab was recently update to version 3. Reason enough to take another look at one of the best solutions of verifying the file integrity of files in the Windows operating system as our last review dates back to November of last year. The software developer Cody Batt has not published a changelog on the HashTab website which makes it very difficulty to get information about the changes in this new version of the computer program.

HashTab adds a new tab to the Windows file properties dialog that displays various hashes that have been calculated by the software. These hashes can then be compared with the values provided by their source to verify the file integrity and make sure that the file has not been tampered with.

This method works nicely when downloading software and files from various popular software portals as these usually display at least one sort of hash on the download page so that the users can verify the file integrity. But that is just one example. It can also be used to verify files after downloading them from friends or colleagues.



The hashes that are displayed can be altered in the program’s options. It is theoretically possible to add all 15 different algorithms to the tab. Another interesting option is the ability to compare a file on the same computer system which takes only a few seconds as a second file has to be selected from a local hard drive.

HashTab is still one of the best software programs to verify the file integrity of files on a computer system. Let us know if you find a changelog or information about the changes that the developer has made in the new version.


Download:-
http://beeblebrox.org/hashtab/

9/17/09

Flawfinder – Source Code Auditing Tool

Darknet spilled these bits on September 16th 2009 @ 9:46 am
Flawfinder is a program that examines source code and reports possible security weaknesses (flaws) sorted by risk level. It’s very useful for quickly finding and removing at least some potential security problems before a program is widely released to the public. It’s a static analysis source code auditing tool.

Flawfinder is specifically designed to be easy to install and use. After installing it, at a command line just type:

flawfinder directory_with_source_code

Flawfinder works on Unix-like systems today (it’s been tested on GNU/Linux), and it should be easy to port to Windows systems. It requires Python 1.5 or greater to run (Python 1.3 or earlier won’t work).

Speed

Flawfinder is written in Python, to simplify the task of writing and extending it. Python code is not as fast as C code, but for the task I believe it’s just fine. Flawfinder version 0.12 on a 400Mhz Pentium II system analyzed 51055 lines in 39.7 seconds, resulting in an average of 1285 analyzed lines/second. Flawfinder 1.20 and later will report their speed (in analyzed lines/second) if you’re curious.

How it works

Flawfinder works by using a built-in database of C/C++ functions with well-known problems, such as buffer overflow risks (e.g., strcpy(), strcat(), gets(), sprintf(), and the scanf() family), format string problems ([v][f]printf(), [v]snprintf(), and syslog()), race conditions (such as access(), chown(), chgrp(), chmod(), tmpfile(), tmpnam(), tempnam(), and mktemp()), potential shell metacharacter dangers (most of the exec() family, system(), popen()), and poor random number acquisition (such as random()). The good thing is that you don’t have to create this database – it comes with the tool.

Flawfinder then takes the source code text, and matches the source code text against those names, while ignoring text inside comments and strings (except for flawfinder directives). Flawfinder also knows about gettext (a common library for internationalized programs), and will treat constant strings passed through gettext as though they were constant strings; this reduces the number of false hits in internationalized programs.

You can download Flawfinder here:

flawfinder-1.27.tar.gz

Or read more here.

9/15/09

Free Screen Sharing and Remote Access Web Tools

How many times it had happened that a person has got a PC problem and the expert is away at some remote location. First person is trying to explain the problem on phone, but not able to explain every detail, and wishes that it would have been better if he was able to share the screens live and the expert could have seen the action live, in front of his eyes.No issues, there are not one, but many applications for screen sharing.

These are all free, and besides rectifying the PC problems remotely, they can be used for collaborative working on with your friends and colleagues. They can also be used, if you want to access files on your PC from a remote location.

So, here we go,

Screen-Sharing and Remote-Collaboration Web tools

1. CrossLoop: Full functionality, simple and clean user interface and fast. I like it. Somewhere I read that it has been included in the best 10 downloads of the year, probably by CNET, (Update courtesy Techblissonline.com: PCWorld)

2. Mikogo: It uses industry-leading 256-AES end-to-end encryption and so is secure. It can be used by upto 10 persons simultaneously. Designed nicely, with a very user friendly platform.

3. TeamViewer:
Full featured application. Many modes, the initiator can decide the level of sharing, whether full access or part. Data transfer is encrypted and secure.

4. Yuuguu: A useful application, for both Mac and Windows, and offers full functionalities of screen sharing, collaborative working and also remote access. It also has a chat functionality, which you can use while you are giving or taking help from somebody else. What’s more, it allows you to keep a record of all the conversation.

5. Unyte Lyte: A relatively simple web tool, which doesn’t offer any remote control feature. But a nice advantage is that you can itegrate it into your Skype client.

Besides, these screen sharing tools, there are other web tools also which give you remote access.

1. SoonR: It extends the remote access facility to your mobile also.

2. FolderShare: It supports both Windows and Mac. It si a free utility from Microsoft and with it you can share files upto 2GB in size.

Xp-AntiSpy | Control Running Windows Processes and Tasks

Ever since I have started learning more and more about Windows Performance and Windows Security, I am finding that most of the online threats can be avoided by some basic precautions and Windows Privacy / Security settings. Extensive features and options are available in our Operating System, which we either ignore either because we do not know about them, or we treat it as a hassle.

For instance, Windows Processes. There are so many Windows Processes running in the background that most of us seldom care to think about them. But a look at the running Windows Processes reveals a lot about the current behavior of your PC. If you are careful, then it can tell a lot.

But there is a small utility, which can help you a great deal here. Welcome to XP-AntiSpy.

his utility is developed and supported by Chris individually. Xp-AntiSpy is a little utility that lets you disable some built-in update and authentication ‘features’ in WindowsXP. In fact, it does much than simply controlling / disabling Windows Processes and tasks. It makes Windows more transparent and controllable. You get to know, what is running in the background, and allows you to control them from one place and that too in in simple, understandable language And the best part is, this utility is totally FREE.

Zamzom – Freeware Parental Control Software

CyberBullying is one of the evils associated with the immense utility of Internet. There are lots of cases, when kids and teens have been harassed and abused for evil intentions. And parents of the children are always on the lookout of an easy way through which they can exercise a control over the access of their wards on Internet.

here are some obvious but very important precautions, which we should encourage the kids to follow, while being online.

* Never give out personal information, including name, address, school or employment, telephone or cell number, personal email address or pictures to someone you do not know personally.
* Never respond to solicitations or comments that make you uncomfortable.
* Never make arrangements to meet someone you have met online. Adults who want to meet people they have met online, should arrange to meet in a public place and with current friends.
* Never believe everything you read in a profile, on a message board or in a chat. Often, people pretend or role–play, either for entertainment, to hide or for other ulterior motives.
* Never submit your personal information or credit card data to an unsecured site.

ZomZom is a Freeware Parental Control Software, which bridges this gap perfectly. This Free Parental Control Download can reveal vital stats about the online presence and activities of your child. This recently launched but popular kid-safe software allows you to

* Save url and image history.
* Take a screen-shot of the desktop at regular intervals
* Alert parents by email
* Block websites or ip addresses
* Inform parents which programs have been used
* Inform parents which websites have been visited

So as a parent, you are fully informed and in control of what your children are doing when online.

Zamzom Control has a very user-friendly interface and does not require any specific computer knowledge. You can use the Zamzom Control anytime, as it is always available in your system tray, although I didn’t like many programs to stay memory resident in my system tray because of cluttering.

It is recommedned that you should clearify everything about this useful Free Parental Control Software Applicationto all the users of the computer and take them into confidence for obvious reasons.

Download Zamzom - Freeware Parental Control Software

[Freeware]-4 Secured FTP (SFTP) Client Software for Safe FTP

What is Secured FTP?

Secured FTP, is the process of transfer of files from one system to the other, through a secured protocol. It is different from simple FTP, File Transfer Protocol because here both the data and commands are exchanged in a secured and encrypted connectivity, generally provided with the SSH (Secured Shell) Protocol.
Are SFTP Clients different from normal FTP Clients?

Since the data is being exchange through a completely different protocol, you need compatible systems at both ends. You cannot use a normal FTP at at the client side with a SFTP server and vice versa. It is a different story that many FTP clients allow to use themselves in both modes, both Secured FTP Mode as well Normal FTP Mode.

Which are Best Free Secured FTP (SFTP) Clients Available Today?

There are lots of available Secured FTP (SFTP) Clients. But many of them require to to pay some fees to pay. Some others are only Free to Trial. Some other Secured FTP Clients, which were Free to use, have discontinued their development. Here we present you four of the best Freeware Secured FTP Clients, which are still running and continuing their development.

FireFTP: FireFTP is a free, open source, cross-platform FTP client for Mozilla Firefox in the form of an add-on. It supports FTP, FTPS, and SFTP. FireFTP is charityware and runs on platforms that Firefox supports. [Related: FireFTP | Firefox addon for safe FTP].

FireFTP supports caching directory listings, and it can also do a comparison between a local directory tree and the remote one. It can connect via proxy servers and it is able to automatically reconnect after disconnection.

Core FTP: Core FTP is a secure FTP client for Windows, developed by CoreFTP.com. Core FTP is a traditional FTP client with local files displayed on the left, remote files on the right. Features include FTP, SSL/TLS, SFTP via SSH, and HTTP/HTTPS support.

FileZilla: FileZilla is a free, open source, cross-platform FTP client. Binaries are available for Windows, Linux, and Mac OS X. It supports FTP, SFTP, and FTPS (FTP over SSL/TLS). Hugely Popular FileZilla is the 5th most popular download of all time from SourceForge.net.

Some of the cool features of FileZilla include Site Manager; which allows a user to create a list of FTP sites along with their connection data, Message log; which displays the console-type output showing the commands sent by FileZilla and the remote server’s responses, File and folder view; allowing display of message log and Transfer queues.

WinSCP: WinSCP, an acronym for Windows Secure Copy is an open source SFTP and FTP client for Microsoft Windows. Beyond its main functgon of File Transfer, WinSCP offers basic file manager and file synchronization functionality. The best part with WinSCP is that it can also act transparently as a remote editor. When the user clicks on a (text) file in the remote file manager, it transfers the file to the local machine and opens it in the integrated editor

AlonWeb – Free Web VPN Software for Fast Personal Use

Imagine these situations…

* Are you faced with the problem of blocking your favorite websites by your Government, ISP, your company or your college LAN administration?
* Do you want to hide your personal data from hackers and spying eyes, while you surf from a public wifi spot?
* Are you concerned that your network administrator or your company’s IT department might be spying on where you go on Internet, what you send by emails and what you chat while on IM?

If yes, then you might consider to use some Free Web VPN Software, which might protect your anonymity and privacy from spying eyes.

AlonWeb is one such software, which ou can down FREE and install on your system, with a few clicks. Alonweb is just an OpenVPN server, based upon the highly popular OpenVPN platform. You just have to create an account with them and start having fun.

But remember, this useful Free WEb VPN service is free only with a 1000MB per month bandwitdh restriction. This seems just enough for simple browsing the web on a pers onal basis. If you want to go beyond that and use it for downloading your favorite songs, video etc., then you will have to go for their paid version.

Visit Alonweb.

Comodo EasyVPN – Free Web VPN Software for Fast Personal Use

If you are looking for a free VPN Client software to establish your own VPN or peer to peer network in an encrypted secured manner over Internet, then Comodo EasyVPN may be the right choice for you.

This Free VPN software is easy to use and configure and uses 128 bit encryption giving you complete secrecy just like your own cabled LAN right on top of Internet. The features of this great VPN software are huge, just like any other paid software for establishing VPN over Internet. Just take a look at the features.

Features of Comodo EasyVPN

* A secure instant messenger client that allows you to chat and send/receive confidential files over an encrypted communications channel
* Remote desktop control over the computers of other users or to securely telecommute into your office computer
* Allows colloborative working, sharing access to local servers and to to provide access to internal networks for remote workers
* Uses industry standard technologies and protocols so no additional software or hardware reconfiguration is necessary.
* Easy to configure

With this useful free tool, the possibilities are just unlimited; use EasyVPN to share your iTunes music, your photograph collection or even setup a multi-player gaming session.
How to use this Useful Free VPN Software

There are just five simple steps any novice computer user can follow.

* Install the software and create an account
* Create a network
* Invite others to join your network
* Joining an existing networking
* Initiate Secure IM conversations, share files and printers or take remote desktop control of another PC

Commercial use (which is any non-personal use) of EasyVPN requires payment of a fee to Comodo prior to the use of the services.

Download:

Free USB Data Encryption with Rohos Mini Drive

Why You Need Data Encryption on USB Drives

USB flash Drives are meant for portability. By their vary nature they can be easily carried away by you, and if you lose them, then by somebody else.

If you happen to carry sensitive and personal data on your USB drives, then you can imagine how easy it is for somebody to get access to that data, in case you lose a USB Drive. Consider using data encryption tools for safeguarding your data in case of any enatuality.

Rohos Mini Drive – A Free USB Data Encryption Tool

Many times data encryption sunds something geeky to an average user, and that is the reason precisely people do use it. But believe me, data encryption is not so dificult. There are specialized tools, which make your life easier and allow you seamless usability. You may not even be knowing that your data is getting encryption before getting stored on your drives.

Rohos Mini Drive is one such tool, specially designed to create hidden and encrypted partition on the USB flash drive memory. You work with the files on the hidden partition without opening a special program.

Rohos Mini Drive program does not create real partition on the USB flash drive. Thus when you insert your USB drive into USB port only one drive letter will appear in Windows. Second (secured) drive will appear only after you active it by entering a password.

Main Features of Rohos Mini Drive include:

* Creates a virtual encrypted partiton volume (disk) within a USB flash drive free space
* Automatically detects your USB stick config and creates encrypted partition
* Program does not require installation to work with encrypted partiton on a guest computer. You can start it right from USB drive
* Encrypted partition is protected by password
* Encryption is automatic and on-the-fly
* Encryption algorithm: AES 256 bit key lenght. NIST approved.
* Rohos Disk Browser to open encrypted partition without having Admin rights
* Virtual Keyboard – to protect your encrypted disk password from a key logger
* Autorun Folder. Saved program’s/file’s shortcut will automatically start/open up upon disk connection
* The limit of encrypted partition size is 2 GB

Download Rohos Mini Drive

WinPatrol – Useful Tool to Manage Windows Security Options

Windows Security is a topic which is talked by many but understood by few. There are so many security options and tweaks that it is sometimes very difficult for an average user to understand them fully and use them appropriately in best manner.

Do not think that if you have installed latest Antivirus, Antispyware and latest firewall, then your computer is secured. Computer Security is lot more than that.

WinPatrol is one such utility, which try to make this easier for you. It is a free software, which continuously monitors your computer for any modifications to the critical areas and alerts you as soon as something like that is attempted.

For instance, if a malware tries to add anything to your Registry’s Startup locations you will be immediately intimated. Similarly is a browser plug0in is installed without your knowledge or any of the file type associates are attempted to be changed, or a schedules task is created, any modifications are attempted to change your hosts file or even a new ActiveX control is installed, you will be prompted about these and you can take appropriate action depending upon whether you have a valid reason for such an action.

you are not able to appreciate the usefulness of this tiny utility, understand this it in this manner. If some stranger knock you on the door of your house, you servant will ask him many questions and intimate you before letting him enter the house. WinPatrol does the same thing. It inquires the strangers, who want to gain access your computer, and let you know about the intentions of the stranger to its master, that is you. Now it is upto you to decipher that information correctly and take an appropriate decision.

Features of This Useful Tool to Manage Windows Security Options

There are a lot of options available. Some of them are…

Schedule your Startup Programs: You can schedule your startup programs selectively to start after say 15 minutes or half an hour. This way you can just initiate your favorite programs and security software in the beginning and start your work immediately, without waiting endlessly to load all your start up programs.

Keep track of risks: WinPatrol also keeps track of when a program, service, Registry entry, or hidden file was first detected on your machine

Better than Most Security Software: Since all security software and antivirus depend upon signature identifications and updation of their signature files, there may be some delay when your antivirus is updated. By this time the malware can infect you. But WinPatrol works in real time and thus provide your better security in some cases.

There are lots of other features which you will love including these.

* Increase Your Speed & System Performance
* Detect & Neutralize Spyware. Detect & Neutralize ADware
* Detect & Neutralize Viral infections. Detect & Neutralize Unwanted IE Add-Ons
* Detect & Restore File Type Changes Automatically Filter Unwanted Cookies
* Avoid Start Page Hijacking. Detect HOSTS file changes
* Kill Multiple Tasks that replicate each other, in a single step
* Stop programs that repeatedly add themselves to your Startup List
* Delete and Remove the most Stubborn Infections

Download WinPatrol

How to Change JKS KeyStore Private Key Password

Use following keytool command to change the key store password >keytool  -storepasswd  -new [new password ]  -keystore  [path to key stor...