I have been procrastinating for lap time encryption time, so its time to do it. Here are some good methods to encrypt folders on your machine from techTV:

NTFS encryption (built into Windows 2000/XP if you did a NTFS partition): Problem most people talk about with it is the files you encrypt are tied to a specific user account. The Administrator also should have access to your encrypted files. If you use a windows brute force password cracker you will be able to use that password to get access to the encrypted files such as:

Cain and Abel: http://www.oxid.it/cain.html
Brutus (HTTP): http://www.hoobie.net/brutus/brutus-download.html
L0phtCrack : http://www.atstake.com/products/lc/

Here are good choices for encrypting folders in windows:

EFS : Windows Encryption File System, here is a link describing how it works for windows XP and server 2003:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/winxppro/deploy/CryptFS.asp

If you are using win2000:
http://www.microsoft.com/windows2000/techinfo/howitworks/security/encrypt.asp

IMPORTANT: I was planning on using EFS for my laptop except that it came stock with XP Home Edition. Unfortunately this is one of the draw-backs of that version. Quote from Microsoft "Note EFS is not available in Windows XP Home Edition."

PGPDisk : http://www.pgpi.org or www.pgp.com(not free)
Maxcrypt : http://www.kinocode.com/maxcrypt.htm
Bestcrypt : http://jetico.sci.fi/
Paragon : http://www.encrypted-disk.com/
PowerCrypt2000: http://www.ovsoft.com/powercry_eng.htm

If you just want to encrypt some passwords these apps are nice and easy:

Passwordsafe: http://www.schneier.com/passsafe.html
Safesex(nullsoft): http://www.nullsoft.com/free/safesex/
Keynote: http://www.tranglos.com/free/keynote.html
TreePad: http://www.treepad.com/treepadsafe/

Nice extensive compression comparison:

http://www.fortunecity.com/skyscraper/true/882/Comparison_OTFCrypto.htm

I have gone with PGPDisk since it has a long legacy for my laptop and it works flawlessly. Create a drive, mount it and copy your files over.
Thats it.

====================================

For your wireless network at home, are you interested in finding out who is jumping onto your network? This app monitors the MAC addresses assigned to each device on your network and notifies you of any \'unfriendly\' devices in your area. It will work for wired networks as well. It seems to be a windows version of linux\'s arpwatch.

http://home.comcast.net/~jay.deboer/airsnare/

====================================

This week techTV had Kevin Mitnick on and performed a caller-id spoof. Apprently he claims this is not documented. There are alot of people asking how this was done, and there are not alot of answers. After talking to a few people today, some were interested on how this was done, so I did some research being interested myself..

The most documented way to do this is: PBX, Orangebox or Calling Card:

http://www.hack-the-planet.org/callidspoof.htm

Orangeboxes I have seen on the net are the following:

http://www.bykeyword.com/downloads/software-7/download-7202.html
http://www.getsomesoft.com/Utilities/Miscellaneous/2227-CIDMage.html

Finally this is a option for a Nokia 5190 phone where you change NAM settings:

http://artofhacking.com/files/callerid/NOKIA5~1.TXT

After reviewing the TiVO on Mitnick it definatley appears he goes through a PBX to do it since he dials a number listens and then types in another phone number then puts the call in to Leo. Also the Nokia 5190 is NOT the phone he has, it looks like he may have a Nokia 5100 and this MAY work on that phone but I would doubt it.


----------------------------------------------------------------------- --------
"We the Network Administrators are the Keyboard Cowboys, all the rest are just the cattle! --- MOOOO!"
----------------------------------------------------------------------- --------