Re: [gentoo-user] [OT] private files

2005-12-20 Thread Thomas Harold

John J. Foster wrote:

On Mon, Dec 19, 2005 at 12:41:51PM -0600, [EMAIL PROTECTED] wrote:


What options are out there?



My personal favorite is
app-crypt/gnupg


Aye, I keep website user info and passwords in text files with the 
contents encrypted with GNUPG.  Each website gets its own text file. 
The big advantage is that backup is dead easy, and since the files are 
plain text you could even print them out to hard copy for backups.  In 
addition, the files are only decrypted long enough for me to get at the 
information (typically to copy-paste a password into a web form).


The main trick with GNUPG is to securely store your private key and 
keyphrase, and make sure that you have backup copies of the private keys 
in offsite locations.


I've also used GNUPG to encrypt backup tar files using a dedicated 
public key as they get written to a backup device.  (Rather CPU 
intensive.)  That way, restoration requires use of the private key to 
restore the file.

--
gentoo-user@gentoo.org mailing list



[gentoo-user] [OT] private files

2005-12-19 Thread reader
Hoping some of you may know the ins and outs of somekind of privacy
precautions for files on disk with such things as software reg keys,
passwrds to various stuff, and stupidly... credit card numbers etc.

I'm on a single user machine so the threat is from network more than
console.  Also I keep backup copies on a remote machine that I don't
control and is part of the big bad internet.

I've visualized something that somehow encrypts a directory or
several.  But in a handy way where it can be opened and used several
times daily without bringing a lunch.

I thought since I'm well familiar with tar and gzip it might be
something to tar.gz the directories and encrypt the result.  Deleting
the source.

But I'm hoping there may be stuff even easier and less time intensive.

The amount of data is under 10 mb always and in fact stands around
1.6mb at present.

I looked a bit at BestCrypt but decided its a big poorly documented
pain in the butt.  Needs kernel mods etc etc.

I wondered if something as simple as passworded rar files might fill
the bill.

What options are out there?

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] private files

2005-12-19 Thread Christoph Eckert

 I thought since I'm well familiar with tar and gzip it might be
 something to tar.gz the directories and encrypt the result.

What about mounting an encrypted filesystem in a file via loopback 
device?

Once configured, it can easily be mounted like

mount ~/Nothinginhere
Passphrase:

For backup issues you can simply copy the file somewhere.

Disadvantage: If one bit flips in the file accidentally, your data is 
lost, but if so, simply restore an earlier backup file, copy the 
contents to the hard drive and create a new crypto file.

There are easy to follow tutorials out there for sure.


Best regards


ce
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] private files

2005-12-19 Thread Neil Bothwick
On Mon, 19 Dec 2005 12:41:51 -0600, [EMAIL PROTECTED] wrote:

 I've visualized something that somehow encrypts a directory or
 several.  But in a handy way where it can be opened and used several
 times daily without bringing a lunch.

If you use KDE, KWallet can be used to store random information as well
as web site passwords etc.


-- 
Neil Bothwick

Top Oxymorons Number 10: Computer security


signature.asc
Description: PGP signature


Re: [gentoo-user] [OT] private files

2005-12-19 Thread Richard Fish
On 12/19/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:
 Hoping some of you may know the ins and outs of somekind of privacy
 precautions for files on disk with such things as software reg keys,
 passwrds to various stuff, and stupidly... credit card numbers etc.

The KDE Wallet system is pretty much ideally suited to storing this
kind of data.

 I'm on a single user machine so the threat is from network more than
 console.

Don't forget about possible theft of the entire computer...especially
if it is a laptop.

 Also I keep backup copies on a remote machine that I don't
 control and is part of the big bad internet.

For backup just copy .kde/share/apps/kwallet/*.kwl to the remote machine.

-Richard

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] private files

2005-12-19 Thread John J. Foster
On Mon, Dec 19, 2005 at 12:41:51PM -0600, [EMAIL PROTECTED] wrote:
 What options are out there?
 
My personal favorite is
app-crypt/gnupg

John


pgp20czflhBuS.pgp
Description: PGP signature