| With the recent passage of the Governments
Anti-Terrorist Bill, computer privacy is a thing of the
past. The government can now enter your home
without notice for three months, and place
"key-stroke" recording devices on your
computers without your knowledge. These are devices
that record every key-stroke performed on a computer
including passwords. Fine, they are suppose to be the good
guys just trying to keep our lives safer. What this whole
computer surveillance issue is about, is the usage of
computers and the Internet for illegal terrorist
activity. The government feels that the terrorist
organizations have utilized the Internet to send
encrypted communications. What is scary, is how
they do this. What is scary is how your unknowing
involvement in this can result in your computer being
confiscated or put under surveillance. How would
you be involved might you ask?
Steganography !!!
What is this might you ask?
Steganography is an encryption technique that hides
communications or files within other files. For example,
a simple photo on the internet might actually have a
letter in the form of a Microsoft Word file embedded in
it. From a simple web surfer perspective this may not
appear as anything more than a simple photo. But
to a person looking for a specific communication, and
with a small file viewer on their computer, they can
download this picture and decrypt the photo from the
letter communication in less than 30 seconds. So how
does this affect you? Well the communications can
be embedded in any of a multitude of common files types
that "Joe Public" comes across everyday.
For example: JPEGs, GIFs, WAV, HTML, BMP, and PNG are
just a few of the files that can be used as a file
carrier to embed other files into. How
simple is it? Very simple, in fact we will provide
an example at the end of this article. Once again, you
might be asking how this will affect you? Well,
whether actually downloading files attached to email, or
right mouse clicking and saving photos or files, or
simply surfing, these files can easily end up on your
computer. Even simply surfing with no downloading
can make you a victim. How? The Temporary
Internet Folder in your Windows Directory is a cache
file that saves components of every web page you
surf. It also is one of the same places cookies
are placed. Problem arises is that your surfing
can come across photos, sound files, or html files
that can have the communications embedded in them.
Simply having these files, or reference to these files
listed in your cache makes your computer evidence in the
eyes of the government. Additionally, these cache files
can have embedded scripts that then utilize your
computer as a "slave" to unknowingly carry out
malicious acts. Even more reason to have a good
personal firewall that not only blocks incoming, but
outgoing unauthorized communications.
Example of Steganography:
Neobyte Solutions is a well known
software development company in Step #1 download
The step #2 JPEG is not embedded with
script or malicious code.
The password is
"yikes" all lower case letters
Step #1
View
File-click here to download Unhider file at botton of
page
Step #2
The
click here to download an JPEG photo that is embedded
with a copy of this article.
Protection ???
Well first of all you should regularly
clean your computers hidden files with a software such
as
TraceEraser or WebWasher from Webroot.


Next, if you are at home, your PC
isn't protected by an expensive network firewall. Nor
can you afford an expensive firewall. There are
many firewall products on the market for home PC use,
but most only block unrecognized incoming traffic.
What about out going traffic if you are already infected
by a Trojan or any other malicious script? Zone
Alarm is a great PC orient personal firewall that can
actually block incoming and outgoing unauthorized
communications. Zone Alarm has a free personal use
version or for $29.95 you can have a Professional
Version is gives you instant feedback about the source
of whom is trying to invade your computer.

Next if you are looking for an easy
method to encrypt email Steganos-has
a great online encryption tool free of charge. You just
need to save this URL, because this is the English
version, and you don't want to get caught in the German
version. Send yourself a sample to see how it
works. Then you can copy and paste the encrypted
message back into the decryption box. Is a nice service
because whom ever you send the encrypted message to can
also go online to the decryption tool and open the
letter without having to have software. All the
need is the password you encrypt with.
or
PGPmail and PGPfile Encryption 7.1-a
well known PC based software.

|
|