Date: Sun, 30 Dec 2001 14:48:23 -0800 (PST) From: David Chien <[EMAIL PROTECTED]> Subject: Re: [LIB] Security
> How up are you on security? Do you think these sorts of precautions would > be enough to prevent some European corporation's internet connections secure > to a probe by Eschelon? Of course since no one without special national I was targeting the basic level hackers out there and so forth that most consumers would want to be protected against. If you're going up against the govermental agencies and so forth, you'd be near crazy given the amount of money, resources and research they've got most likely in hacking into systems, or more importantly, simply viewing what's on your PC from afar w/o even hacking into it. (eg. reasoning behind Tempest PC shielding and those wonderful TV modifications that let you see the PC screens of local users from afar). Anyways, if you really want to go a bit neuro, I'd say that even with my 'consumer' grade knowledge of security and all, you'd have to start with a full lock-down perimeter around your house and PC, followed by extremely good audio, visual, thermal and radiation shielding/blocking/scrambling to protect the PCs inside, a full check of possible probes and bugs, fully PGP Disk encrypted data on preferably an encrytped file system, etc., etc. That'll at least secure local access. Unfortunately, they can tap into anything sent over commercial lines out of your home to the Net, so you've got an open hole there for outside hacks. I'd then consider having 2-4 firewall PCs inbetween the outside and your main PC. Maybe something like [outside line].. [secured Mac 9.x OS box] .. [secured Linux box] ..[hardware Firewall box] .. [PC] Figure if they can get through all of these three+ firewalls, they're pretty dedicated. (maybe one of those firewalls that PCWeek had tested in their e-hack challenges, too) As for the PC itself, figure anything running Windows + ZoneAlarm + Webwasher + Netscape + maybe a few other anti-hack/firewall/anti-virus tools would be good - eg. can't hurt to run both Tiny Firewall + ZoneAlarm + Internet JunkBuster all at once. That and daily/weekly restores from a clean CD-R backup to wipe the HD 100% clean of any final, possible undetected exploits that may have gotten in. > >www.pgpi.com's PGP Disk will help keep your PC secured from outside > > Something that guy said that threw me was that PGP was an algorithm in PGP uses different algorithms vs. PGPDisk, which uses the CAST method as I vaguely recall. In any case, open source code so you can check everything. Nothing such as PGPDisk is uncrackable, just will take a long time to do with current, easily avail. technology. TOmoorrow's technology will have a good time at it, esp. with those quantum computers and so forth that'll operate far faster than our PC s today - never know what those spooks have hidden back. > Another thing this guy told me was that DES has been broken. I asked if True. PGP and PGPDisk do not use DES. ===== adorable toshiba libretto The latest news and information for the Toshiba Libretto owner. http://www.silverace.com/libretto/ __________________________________________________ Do You Yahoo!? Send your FREE holiday greetings online! http://greetings.yahoo.com ************************************************************** http://libretto.basiclink.com - Libretto mailing list http://libretto.basiclink.com/archive - Archives http://www.picante.com/~gtaylor/portable/faq.html - FAQ -------TO UNSUBSCRIBE------- Reply to any of the list messages. The reply mail should be addressed to: [EMAIL PROTECTED] - Then replace any text on the message's subject line: cmd:unsubscribe --------TO UNSUBSCRIBE DIGEST------ Do above but with this on subject line: cmd:unsubscribe digest **************************************************************
