If you´re ever in the need of a high security password the Ultra High Security Password Generator Website might be exactly what you´ve been looking for. Everytime you visit or refresh the website it will display three randomly generated passwords, one 64 random hexadecimal charakters password, one 63 random printable ASCII chars and finally a 63 random alpha-numeric characters password.

“Every one is completely random (maximum entropy) without any pattern, and the cryptographically-strong pseudo random number generator we use guarantees that no similar strings will ever be produced again. Also, because this page will only allow itself to be displayed over a snoop-proof and proxy-proof high-security SSL connection, and it is marked as having expired back in 1999, this page which was custom generated just now for you will not be cached or visible to anyone else.”

continue reading "Ultra High Security Password Generator"

LogMeIn is another service that gives you remote control over a computer. It uses a java applet that has to be executed be the computer that should be controlled and a website that gives you control over the computer (or more than one) with the applet. That means you don´t have to install software or use a usb stick to run programs on the other computer, you simply open a website and control the computer at home.

This is a great way to overcome security settings and surf the web freely without restrictions, yes even those banned myspace.com sites. The free version of logmein does not allow to transfer files between computers but gives you full control of the remote one, you can open tools like browsers and email clients for instance and use them as if you were sitting in front of them. If your school banned myspace.com this could be worth trying out.

continue reading "Avoid Web Filters with LogMeIn"

A new public beta of Zfone has been released a few days ago for windows xp, linux and mac os x. Zfone uses a new protocol called ZRTP, which is better than the other approaches to secure VoIP. “(ZRTP) achieves security without reliance on a PKI (Public Key Infrastructure), key certification, trust models, certificate authorities, or key management complexity that bedevils the email encryption world,” Zimmermann explains.

Zfone works with VOIP software like Gizmo and SIPphone but not with the popular Skype. “Skype uses a closed proprietary protocol, which they (the developers) do not publish”. Head to the developers webpage to read more about the new tool of the creator of the PGP standard.

continue reading "Secure VOIP by encrypting it with ZFone"

The article wireless security attacks and defenses begins with a example how people who are new to the wireless world run their wireless devices carelessly and thus invite others (with more knowledge) to exploit this weakness. Those people run for example wireless routers at factory defaults because they don´t know better, they think the device is safe the way it´s preconfigured.

My personal advice would be to avoid using something that you don´t know enough about. You should read at least the instructions which should help you setup a relative secure system but that´s of course not sufficient. You should do some research on the internet and articles like the one mentioned above help you understand the concepts and secure your wireless connection.

continue reading "Wireless Security: Attacks and Defenses"

The article “Five common Web application vulnerabilities” lists and explains five common attack forms and presents an example how this vulnerability could have been exploited. The explanation is clearly aimed at people who do not have dealt with such vulnerabilities before, seems to be a great way to start and getting informed.
The five attacks in question are:

1. Remote code execution
2. SQL injection
3. Format string vulnerabilities
4. Cross Site Scripting (XSS)
5. Username enumeration

continue reading "Five common Web application vulnerabilities"