Re: Pgp Software

2004-12-20 Thread Mica Mijatovic
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

   ***^\ ._)~~
 ~( __ _o   Was another beautiful day, Mon, 20 Dec 2004,
   @  @  at 08:32:26 +1100, when Robin Anson wrote:

 On Sun 19 December 2004, 3:52:05 +1000, Mica Mijatovic wrote:
 Just to add shortly that I found that PGP 6.0.2i, coming with PGPdisk,
 is free, and that's the way how I solved use of an encrypted volume I
 keep TB and Mail in, under both XP and Win98Se.

 I used to run 6.0.2i for PGPdisk, but when I was upgraded to WinXP I
 decided to get PGP 8 because there seemed to be some doubt about whether
 6.0.2i version of PGPdisk was compatible with WinXP. It claims not to
 be, and the consequence of losing the contents of my encrypted disk
 containers was too great to take the risk.

Now, when I thought that I finally found a solution, you are puzzling
me.

In 6.0.2i documentation they mention only NT Windows, of this branch,
not any XP, true. But I didn't get any warning, during installation or
else, related to any risk or incompatibility, and up to now it works
quite well.

Can you tell me please where this claiming is coming from exactly, so I
could put a closer attention and see what I can do? Is it possible that
it has something with service packs?

This XP I still use for experimenting purposes (since I *have* to use
them occasionally when am involved in a work for others, so that I want
to be familiar enough with the OS), and one copy being on my machine,
means that I treat *this one* as I treat my old 98se: no any service
packs, and strictly tamed by microlite/litepc technology and similar.

- --
Mica
PGP key uploaded at: http://pgp.mit.edu/ once just before breakfast
:bearhug:
[Earth LOG: 110 day(s) since v3.0 unleashing]
OS: Windows 98 SE Micro Lite Professional IVa Enterprise Millennium
with nestled ZipSlack(tm) 9.1 UMSDOS Linux, and with Bochs 2.1.1
with a small DLX Linux;
and, for TB sometimes Libranet (Linux) 2.8.1, via Cross Over Office
-BEGIN PGP SIGNATURE-

iD8DBQFBxsp59q62QPd3XuIRAjnqAJ9mJFb6WE0ZwWxs8RgmUKnr6JNBMgCeO6yi
5xwAFitkhW6V/wb7fep2AnA=
=IgOW
-END PGP SIGNATURE-



Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-12-20 Thread B R i a N S
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Date : Mon, 20 Dec 2004 08:32:26 +1100
Robin Anson [EMAIL PROTECTED] wrote this lines:

Robin On Sun 19 December 2004, 3:52:05 +1000, Mica Mijatovic wrote:
 Just to add shortly that I found that PGP 6.0.2i, coming with PGPdisk,
 is free, and that's the way how I solved use of an encrypted volume I
 keep TB and Mail in, under both XP and Win98Se.

Robin I used to run 6.0.2i for PGPdisk, but when I was upgraded to WinXP I
Robin decided to get PGP 8 because there seemed to be some doubt about
whether
Robin 6.0.2i version of PGPdisk was compatible with WinXP. It claims not
to
Robin be, and the consequence of losing the contents of my encrypted disk
Robin containers was too great to take the risk.

Windows XP is not compatible with previous versions of PGP 8.x

PGP CyberKnights Templar 6.5.8 and also have PGPDisk included and it's
compatible
with Windows XP.

- --
Cheers,
B R i a N S

,- [ I'm listening right now ]
|Cranberries, The - Shattered
`--
Composed on 12/20/2004 at 8:56 AM
using The Bat!™ Natural Email System ! v3.0.2.10

All truly wise thoughts have been thought already thousands of times;
but to make them truly ours, we must think them over again honestly,
till they take root in our personal experience.-- Johann Wolfgang von
Goethe (1749-1832)

-BEGIN PGP SIGNATURE-
Version: PGP 7.1 Corporate Desktop Security http://www.nai.com
Comment: If privacy is outlawed, only outlaws will have privacy.--prz

iQA/AwUBQcbbn3e26k6OWHc8EQJI1gCfUsZkoQ3bJeZMJ6M9bK/wabE453wAmwRz
yvmkybH4qveiMKvZXFdzCYl1
=Rt6Y
-END PGP SIGNATURE-




Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


PGPfreeware 6.0.2i ftp download (was: Re: Pgp Software)

2004-12-19 Thread B R i a N S
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Date : Sat, 18 Dec 2004 19:18:34 +0100
Henk de Bruijn [EMAIL PROTECTED] wrote this lines:

Henk Hello Mica,

Henk On Sat, 18 Dec 2004 17:52:05 +0100GMT (18-12-2004, 17:52 +0100, where
Henk I live), you wrote:

Henk ...snip

Henk ftp://ftp.de.pgpi.org/pub/pgp/6.0/6.0.2i/PGPfreeware602i.exe

Henk does not work :-(

ftp://ftp.hacktic.nl/pub/crypto/pgp/pgp60/pgp602i_freeware

Try this link ;)

- --
Saludos,
B R i a N S

,- [ I'm listening right now ]
|Kelvis - Si tu no quieres
`-
Composed on 12/19/2004 at 9:55 AM
using The Bat!™ Natural Email System ! v3.0.2.10

The world is coming to an end. Please log off.-- Posix 2.1.1 System
Shutdown Message

-BEGIN PGP SIGNATURE-
Version: PGP 7.1 Corporate Desktop Security http://www.nai.com
Comment: If privacy is outlawed, only outlaws will have privacy.--prz

iQA/AwUBQcWXNXe26k6OWHc8EQKGlwCdHqVV5fB0OnZDjBHs8EJ6HsyZm2UAoIR6
xBIix9jq4Z+rIpvmt0sksC/R
=+fNE
-END PGP SIGNATURE-




Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: PGPfreeware 6.0.2i ftp download (was: Re: Pgp Software)

2004-12-19 Thread Henk de Bruijn
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello B,

On Sun, 19 Dec 2004 09:58:51 -0500GMT (19-12-2004, 15:58 +0100, where
I live), you wrote:

 ftp://ftp.hacktic.nl/pub/crypto/pgp/pgp60/pgp602i_freeware

 Try this link ;)

Thanks! I already managed to download.

- --
cheers,
Henk
__
The Bat!™ Natural Email System v3.0.2.10nl Professional on Windows XP SP2
PGP Key Request: See Headers or send email with subj.: send HenksKeyID
Gossamer Spider Web of Trust GSWoT http://gswot.webhop.info/
A Progressive and Innovative Web of Trust

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (MingW32) - GPGrelay v0.955

iD8DBQFBxa5LEgabk9vm5ngRAq94AKCTzRgzISqL/xRYML8x6/lDGBl9pQCePL3M
EOU9VifzfAsHDFi13GftfIQ=
=NYSu
-END PGP SIGNATURE-



Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-12-19 Thread Robin Anson
On Sun 19 December 2004, 3:52:05 +1000, Mica Mijatovic wrote:
 Just to add shortly that I found that PGP 6.0.2i, coming with PGPdisk,
 is free, and that's the way how I solved use of an encrypted volume I
 keep TB and Mail in, under both XP and Win98Se.

I used to run 6.0.2i for PGPdisk, but when I was upgraded to WinXP I
decided to get PGP 8 because there seemed to be some doubt about whether
6.0.2i version of PGPdisk was compatible with WinXP. It claims not to
be, and the consequence of losing the contents of my encrypted disk
containers was too great to take the risk.

-- 
Robin

Using The Bat! v3.0.1.33 on Windows XP 5.1 Build 2600 Service Pack 2




Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-12-18 Thread Mica Mijatovic
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

   ***^\ ._)~~
 ~( __ _o   Was another beautiful day, Mon, 18 Oct 2004,
   @  @  at 21:04:27 +0200, when Peter Palmreuther wrote:

 - PGP-Desktop is as expensive as DriveCrypt, the successor of Scramdisk,
   but you get not only the disk encrypter, but a general (including,
   but not limited to communication-) encrypter as well.

Just to add shortly that I found that PGP 6.0.2i, coming with PGPdisk,
is free, and that's the way how I solved use of an encrypted volume I
keep TB and Mail in, under both XP and Win98Se.

I took this version of PGP just because of this PGPdisk, while still
prefer (tiny and mighty) GnuPG for all other things. (-:

Thanks a lot for all the rest you did write; I'm still thinking about it
and am rummaging around.

Ah yes, for those interested in this version of PGP, the download link
is ftp://ftp.de.pgpi.org/pub/pgp/6.0/6.0.2i/PGPfreeware602i.exe.

- --
Mica
PGP key uploaded at: http://pgp.mit.edu/ once just before breakfast
:banana:
[Earth LOG: 108 day(s) since v3.0 unleashing]
OS: Windows 98 SE Micro Lite Professional IVa Enterprise Millennium
with nestled ZipSlack(tm) 9.1 UMSDOS Linux, and with Bochs 2.1.1
with a small DLX Linux;
and, for TB sometimes Libranet (Linux) 2.8.1, via Cross Over Office
-BEGIN PGP SIGNATURE-

iD8DBQFBxGA09q62QPd3XuIRAiamAJ4tCp60/c+UUq1dDuMgcs92+V3NJQCfbmke
Vp9qZh4tU6WV4zgqkpVB5S8=
=WOVY
-END PGP SIGNATURE-



Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-12-18 Thread Henk de Bruijn
Hello Mica,

On Sat, 18 Dec 2004 17:52:05 +0100GMT (18-12-2004, 17:52 +0100, where
I live), you wrote:

...snip

ftp://ftp.de.pgpi.org/pub/pgp/6.0/6.0.2i/PGPfreeware602i.exe

does not work :-(

-- 
Henk
__
The Bat!™ Natural Email System v3.0.2.10nl Professional on Windows XP SP2
PGP Key Request: See Headers or send email with subj.: send HenksKeyID
Gossamer Spider Web of Trust GSWoT http://gswot.webhop.info/
A Progressive and Innovative Web of Trust




Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-12-18 Thread Scott Frederick
Hello Henk,

Saturday, December 18, 2004, 10:18:34 AM, you wrote:

HdB ftp://ftp.de.pgpi.org/pub/pgp/6.0/6.0.2i/PGPfreeware602i.exe
HdB does not work :-(

Try:
ftp://ftp.zedz.net/pub/crypto/pgp/

-- 
Best regards,
 Scottmailto:[EMAIL PROTECTED]
BayesIt! 0.5.5
Using The Bat! 2.12.00 under Windows 98 4.10 Build   A  
pgp key: 
mailto:[EMAIL PROTECTED]Body=Please%20send%20keys



Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-12-18 Thread Mica Mijatovic
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

   ***^\ ._)~~
 ~( __ _o   Was another beautiful day, Sat, 18 Dec 2004,
   @  @  at 19:18:34 +0100, when Henk de Bruijn wrote:

 Hello Mica,

 On Sat, 18 Dec 2004 17:52:05 +0100GMT (18-12-2004, 17:52 +0100, where
 I live), you wrote:

 ...snip

 ftp://ftp.de.pgpi.org/pub/pgp/6.0/6.0.2i/PGPfreeware602i.exe

 does not work :-(

It worked on Sat Oct 16 2004 for me. I admit that most German FTP
servers work very slow for me, but must be there are other places this
version can be found. Try to google a bit by the file name, or try again
the link.

- --
Mica
PGP key uploaded at: http://pgp.mit.edu/ once just before breakfast
:happypiglet:
[Earth LOG: 108 day(s) since v3.0 unleashing]
OS: Windows 98 SE Micro Lite Professional IVa Enterprise Millennium
with nestled ZipSlack(tm) 9.1 UMSDOS Linux, and with Bochs 2.1.1
with a small DLX Linux;
and, for TB sometimes Libranet (Linux) 2.8.1, via Cross Over Office
-BEGIN PGP SIGNATURE-

iD8DBQFBxHtC9q62QPd3XuIRAqXWAJ47VBKyXFY2J/Wiu7xvQbaytVWYpQCgkQm3
PBTb7lHEN1al1WBBIVcujNo=
=sZ+X
-END PGP SIGNATURE-



Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-12-18 Thread Henk de Bruijn
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello Scott,

On Sat, 18 Dec 2004 10:31:58 -0800GMT (18-12-2004, 19:31 +0100, where
I live), you wrote:

 Try:
 ftp://ftp.zedz.net/pub/crypto/pgp/

Thanks!

- --
cheers,
Henk
__
The Bat!™ Natural Email System v3.0.2.10nl Professional on Windows XP SP2
PGP Key Request: See Headers or send email with subj.: send HenksKeyID
Gossamer Spider Web of Trust GSWoT http://gswot.webhop.info/
A Progressive and Innovative Web of Trust
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (MingW32)

iD8DBQFBxIG9Egabk9vm5ngRApHQAKC+UnsiyAIYC6e7w9Bi9PmqmIGkBACg7NIs
BoByFTWwu3nJVwOi9hl5efg=
=1H1K
-END PGP SIGNATURE-




Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-12-18 Thread Henk de Bruijn
Hello Mica,

On Sat, 18 Dec 2004 19:47:31 +0100GMT (18-12-2004, 19:47 +0100, where
I live), you wrote:

 It worked on Sat Oct 16 2004 for me. I admit that most German FTP
 servers work very slow for me, but must be there are other places this
 version can be found. Try to google a bit by the file name, or try again
 the link.

Thanks, Scott helped me with an alternative address. Downloaded it..

-- 
cheers,
Henk
__
The Bat!™ Natural Email System v3.0.2.10nl Professional on Windows XP SP2
PGP Key Request: See Headers or send email with subj.: send HenksKeyID
Gossamer Spider Web of Trust GSWoT http://gswot.webhop.info/
A Progressive and Innovative Web of Trust




Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-10-18 Thread Peter Palmreuther
Hello Mica,

On Sunday, October 17, 2004 at 2:41:35 PM Mica [MM] wrote:

MM I hopped that's possible that you boot gradually, firstly in DOS
MM mode, then you decrypt containers, and then boot in Windows. This
MM way you would be able to encrypt entire OS partition as well.

This would actually require a DOS based OS, which WinNT, Win2k and
WinXP aren't.
Additionally you'd need to write a boot loader which can replace
current (DOS) kernel by Windows kernel, as from DOS-stage you're not
really executing a boot process as BIOS does.
Additionally this replacement has to performed in a way that keeps
nevertheless crucial parts of the DOS-kernel loaded, for
PGPDisk-drivers not being unloaded.

All in all this would be a quite complex thing and I don't think
somebody already managed this for Windows.

MM But there is still an other advantage of PGP over Scramdisk (which can
MM be used without any installation, and from a floppy), and this is, if I
MM understood well, that your files in a mounted container are all in a
MM non-readable form, except the ones you have active/open in the given
MM moment, when you work with them.

Well ... define have open. Having a file open requires to open it
first. This open would fail if the file(s) were non-readable. So
it/they must be readable, else you wouldn't be able to open it
yourself.
-- 
Regards
Peter Palmreuther

(The Bat! v3.0.2.1 on Windows XP 5.1 Build 2600 Service Pack 2)

So, George, do you really believe Monotheism is a gift from the gods?



Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-10-18 Thread Mica Mijatovic
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

   ***^\ ._)~~
 ~( __ _o   Was another beautiful day, Mon, 18 Oct 2004,
   @  @  at 13:07:59 +0200, when Peter Palmreuther wrote:

[...]

 All in all this would be a quite complex thing and I don't think
 somebody already managed this for Windows.

Ah, I see... OK then, what remains is to relocate then the critical
programs and sensitive files to an encrypted partition/container, and
that should have the job done pretty well. So, that supposed advantage
of PGP Disk over Scramdisk is dismissed.

MM But there is still an other advantage of PGP over Scramdisk (which can
MM be used without any installation, and from a floppy), and this is, if I
MM understood well, that your files in a mounted container are all in a
MM non-readable form, except the ones you have active/open in the given
MM moment, when you work with them.

 Well ... define have open. Having a file open requires to open it
 first. This open would fail if the file(s) were non-readable. So
 it/they must be readable, else you wouldn't be able to open it
 yourself.

This what I wrote above is based on characteristics described in PGP
User Guide: Even a mounted volume is protected: unless a file or
application is in use, it is stored in encrypted format.

This defined by in use I worded by have open. For the term
encrypted format, I have used non-readable form. (Not sure about
correctness of my term for the latter one, that is if is possible that
something encrypted might be readable.)

If this is true, it would give a certain advantage when we use
programs/files in a mounted container while we are eg. 'on line', and
*if* a possible trojan beasts are active, so that if any data from the
container is stolen, it will be in encrypted format; except the one we
have in use in this moment, and *if* the wise-guy/girl targeted right
this one, eg. some message we read (therefore being in use) in TB
right in this moment.

- --
Mica
PGP key uploaded at: http://pgp.mit.edu/ once just before breakfast
[Earth LOG: 47 day(s) since v3.0 unleashing]
-BEGIN PGP SIGNATURE-

iD8DBQFBc9TE9q62QPd3XuIRAgfWAKCK6NelYE49+EVmGTeQMuMxN02gfwCfTVKo
E/2XyU6uk+qOv7nZ0rX8dKk=
=Q9wv
-END PGP SIGNATURE-



Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-10-18 Thread Peter Palmreuther
Hello Mica,

On Monday, October 18, 2004 at 4:35:49 PM Mica [MM] wrote:

MM But there is still an other advantage of PGP over Scramdisk (which can
MM be used without any installation, and from a floppy), and this is, if I
MM understood well, that your files in a mounted container are all in a
MM non-readable form, except the ones you have active/open in the given
MM moment, when you work with them.

 Well ... define have open. Having a file open requires to open it
 first. This open would fail if the file(s) were non-readable. So
 it/they must be readable, else you wouldn't be able to open it
 yourself.

MM This what I wrote above is based on characteristics described in PGP
MM User Guide: Even a mounted volume is protected: unless a file or
MM application is in use, it is stored in encrypted format.

MM This defined by in use I worded by have open.

Correct.

MM For the term encrypted format, I have used non-readable form.

Not really correct.

What the sentence is about to tell is: the PGP-Volume is decrypted
on-the-fly, that means: whenever something uses the usual way to
open a file, i.e. using system call to file system, the PGP-driver
will fetch the file from PGP-volumen and decrypt it's contents.

The opposite would be: when a PGP-volume is mounted it is decrypted,
hang into the system and all files are present in a decrypted form.

The advantage of PGPs way is little, but not really useless: there's
no chance to raw byte access the PGP-volume and steal files, you'll
have to use system calls to gain access to a file.
With a decrypted volume being mounted (the way PGP does not go) one
could raw byte access this device and fetch all the data in their
decrypted representation.

I don't know why any malicious software would try to raw-access a
block device, instead of simply using file system calls, except if
something like ACLs (access control lists) might prevent access
through sys-calls. As PGP-volumes can be formatted using NTFS this
even a mounted volume is protected could make sense.

But I guess Scramdisk uses similar technology, else RAM or HDD-space
could rather fast go low, if a complete disk would be stored encryped
AND decrypted when mounted.

Nevertheless I think PGP-disk is superior to Scramdisk (from what I
see on Scramdisk home page as features being supported and screenshots
being presented):
- PGP-volumes can be located at any formatted partition, not only FAT
  (if the web site is actually right with this limitation)
- PGP-volumes can be NTFS formatted, I don't see a single hint
  Scramdisk supports something different than FAT. This leads to
  mounted volumes are NOT necessarily open to everybody with file
  system access, because normal Windows permissions can be applied on
  top of encryption.
- PGPDisk supports AES (256Bit)
- PGP-Desktop is as expensive as DriveCrypt, the successor of Scramdisk,
  but you get not only the disk encrypter, but a general (including,
  but not limited to communication-) encrypter as well.

But that's just MHO, it doesn't necessarily mean somebody has to share
it :-)

There's one thing that makes me wonder:
DriveCrypt Plus Pack - encrypts the whole operating system

I'm not really sure if and how this works reliable and fast when it
comes to Windows being installed ... but I might be narrow-minded :-)
-- 
Regards
Peter Palmreuther

(The Bat! v3.0.2.1 on Windows XP 5.1 Build 2600 Service Pack 2)

We are not punished for our sins, but by them.



Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-10-17 Thread Mica Mijatovic
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

   ***^\ ._)~~
 ~( __ _o   Was another beautiful day, Sat, 16 Oct 2004,
   @  @  at 21:21:10 -0500, when Allie Martin wrote:

 On 16/10/2004 at 5:24:50 PM, Mica, [M] wrote:

 When you're mentioning PGP... you know, perhaps, that I don't like
 big applications, and that I am a fan of tiny and mighty. (:
 But, I heard, and am not sure, yet, is this true, that PGP (the one
 coming with PGP disk) has a feature to decrypt a disk/container
 *before* Windows' is booted. Is that true?

 Hmm. Never heard of this capability and there's one small problem,
 i.e., the issue of the need for a passphrase to decrypt and mount the
 pgp disk.

 I came across the following and think it's this functionality that has
 been exaggerated:

 ,- / To mount PGPdisk volumes automatically  \
 |Create a shortcut for each of the PGPdisk files that you want mounted
 |when you start your computer.
 |
 |Place the shortcut(s) in the Winnt\Profiles\{Name of Current User}\
 |Start Menu\Programs\startup folder.
 |
 |Once you have placed the shortcut(s) in your startup folder, the
 |PGPdisk volumes are mounted whenever you start your computer.
 |
 |Note: You are prompted to enter the passphrase for each PGPdisk volume
 |as it mounts.
 `-

Yes, that's uttermost what I got from the Manual too, in this sense.
Then it is same as with Scramdisk. I hopped that's possible that you
boot gradually, firstly in DOS mode, then you decrypt containers, and
then boot in Windows. This way you would be able to encrypt entire OS
partition as well.

But there is still an other advantage of PGP over Scramdisk (which can
be used without any installation, and from a floppy), and this is, if I
understood well, that your files in a mounted container are all in a
non-readable form, except the ones you have active/open in the given
moment, when you work with them. This is a fine and a serious advantage,
and if it shows true, I would probably replace Scramdisk with PGP Disk.

- --
Mica
PGP key uploaded at: http://pgp.mit.edu/ once just before breakfast
[Earth LOG: 46 day(s) since v3.0 unleashing]
-BEGIN PGP SIGNATURE-

iD8DBQFBcmh+9q62QPd3XuIRApE7AKCTPWPVmEMq9mWDU4KXytcQUZ3LfQCgh3Ih
yPqC/0rScQKHTgF873gKiY8=
=KDR0
-END PGP SIGNATURE-



Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-10-16 Thread Mica Mijatovic
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

   ***^\ ._)~~
 ~( __ _o   Was another beautiful day, Fri, 15 Oct 2004,
   @  @  at 12:41:58 +0200, when Mica Mijatovic wrote:

 Was Fri, 24 Sep 2004, at 14:01:28 -0400,
 when Paul [EMAIL PROTECTED] wrote:

MM Anyway and whatever could happen, a longer means more time, as I
MM understand these cracking technics. (-: More time - good, positive.
MM Fast - bad, negative.

 this is true. But really, what is it I am protecting, and how bad do i
 want to protect it? There aren't that many passwords that i have that
 are really that important to me, who would really want them??
 and if they got them, could they hurt me?? probably no, most of the
 time. especially with PGP and an encrypted message! I don't use it much,
 but if things get sensitive, I can always use it!

 I agree, particularly with the first sentence.

Ops! It sounds as I referred to the this is true. part, although I
didn't perceive it as a sentence but as a part of some previous one.
What I had considered here as the first sentence actually was: But
really, what is it I am protecting, and how bad do i want to protect
it? (-:

- --
Mica
PGP key uploaded at: http://pgp.mit.edu/ once just before breakfast
[Earth LOG: 45 day(s) since v3.0 unleashing]
-BEGIN PGP SIGNATURE-

iD8DBQFBcRLM9q62QPd3XuIRAnJBAKCKUgx8/GzfW+jr55HlY/sqnySh2QCeOW1t
6d7fzBlPV6VLJQ6+W1IX4tY=
=8KtZ
-END PGP SIGNATURE-



Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-10-16 Thread Mica Mijatovic
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

   ***^\ ._)~~
 ~( __ _o   Was another beautiful day, Sat, 16 Oct 2004,
   @  @  at 13:13:12 -0400, when [EMAIL PROTECTED] wrote:

 With all these discussion about PGP,
 I wanted to give a try
 I hope the PGP will work

If I had your public key, I could verify your signature. Now, I only get
this:

gpg: Signature made 10/16/04 19:13:12 Central Europe Daylight Time using DSA key ID 
B17827E7
gpg: Can't check signature: public key not found

- --
Mica
PGP key uploaded at: http://pgp.mit.edu/ once just before breakfast
[Earth LOG: 45 day(s) since v3.0 unleashing]
-BEGIN PGP SIGNATURE-

iD8DBQFBcWHS9q62QPd3XuIRAjZcAJ4uRggUfjWaRaN1D7Io2kVgtWL2VgCbBQ2n
uSNj7NW89kPC/jYCeCxZopU=
=BEHt
-END PGP SIGNATURE-



Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-10-16 Thread Mica Mijatovic
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

   ***^\ ._)~~
 ~( __ _o   Was another beautiful day, Sat, 16 Oct 2004,
   @  @  at 15:51:54 -0500, when Allie Martin wrote:

 On 16/10/2004 at 1:00:51 PM, Mica, [M] wrote:

 If I had your public key, I could verify your signature. Now, I only
 get this:

 You suffered GnuPG's weakness, i.e., its inability to check more than
 one keyserver. PGP found his key just fine. The signature is good too.

I believe I rather suffered a narrowed consciousness, since I had not in
mind at all to look at key server (pgp.mit.edu always so far delivers me
the wanted key), but instead I examined body and the headers of message,
for a clue.

When you're mentioning PGP... you know, perhaps, that I don't like big
applications, and that I am a fan of tiny and mighty. (: But, I
heard, and am not sure, yet, is this true, that PGP (the one coming with
PGP disk) has a feature to decrypt a disk/container *before* Windows'
is booted. Is that true?

I downloaded yesterday PGPfreeware602i.exe, installed it, but still
couldn't get close with it, nor have it tried out more detailed.

- --
Mica
PGP key uploaded at: http://pgp.mit.edu/ once just before breakfast
[Earth LOG: 46 day(s) since v3.0 unleashing]
-BEGIN PGP SIGNATURE-

iD8DBQFBcZ+x9q62QPd3XuIRAkWCAJ0eCvtOfosS/5dvChKiljZ/d2ZmfwCfaecm
NguXcrZ4If0H6gjTJkb2aM4=
=TqIt
-END PGP SIGNATURE-



Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-10-16 Thread Allie Martin
On 16/10/2004 at 5:24:50 PM, Mica, [M] wrote:

 When you're mentioning PGP... you know, perhaps, that I don't like
 big applications, and that I am a fan of tiny and mighty. (:
 But, I heard, and am not sure, yet, is this true, that PGP (the one
 coming with PGP disk) has a feature to decrypt a disk/container
 *before* Windows' is booted. Is that true?

Hmm. Never heard of this capability and there's one small problem,
i.e., the issue of the need for a passphrase to decrypt and mount the
pgp disk.

I came across the following and think it's this functionality that has
been exaggerated:

,- / To mount PGPdisk volumes automatically  \
|Create a shortcut for each of the PGPdisk files that you want mounted
|when you start your computer.
| 
|Place the shortcut(s) in the Winnt\Profiles\{Name of Current User}\
|Start Menu\Programs\startup folder.
| 
|Once you have placed the shortcut(s) in your startup folder, the
|PGPdisk volumes are mounted whenever you start your computer.
| 
|Note: You are prompted to enter the passphrase for each PGPdisk volume
|as it mounts.
`-

-- 
-= Allie =-
. 90% of being smart is knowing what you're dumb at.
__
The Bat!™ v3.0.1.33  -  IMAP mail  




Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-10-15 Thread Mica Mijatovic
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Was Fri, 24 Sep 2004, at 14:01:28 -0400,
when Paul [EMAIL PROTECTED] wrote:

MM Anyway and whatever could happen, a longer means more time, as I
MM understand these cracking technics. (-: More time - good, positive.
MM Fast - bad, negative.

 this is true. But really, what is it I am protecting, and how bad do i
 want to protect it? There aren't that many passwords that i have that
 are really that important to me, who would really want them??
 and if they got them, could they hurt me?? probably no, most of the
 time. especially with PGP and an encrypted message! I don't use it much,
 but if things get sensitive, I can always use it!

I agree, particularly with the first sentence.

As for the last one, there are opinions that is best to sign/encrypt ALL
your mail, since if you do that only with the sensitive ones, then
it's easier for a snooper to direct his/her dirty intentions.

But, while signing is always possible, encrypting is not, since you
would have to have then your correspondents able to use some PGP/GPG
software.

Also is handy to put y|our public key info somewhere in a corner of your
mail, so that if someone would want to send you an enveloped/encrypted
message, it would be possible.

Now, this indeed has gone to OT area.

- --
Mica
-BEGIN PGP SIGNATURE-

iD8DBQFBb6l19q62QPd3XuIRAomtAJ41f/KxDHnjvmpoViCoj1Vd0xvkWgCfeOyi
lrr4ByYfLxehgMuoe9dsyM8=
=mw9r
-END PGP SIGNATURE-



Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-09-25 Thread Tony
Hello Paul,

Friday, September 24, 2004, 8:04:53 PM, you wrote:

.

 tell me about these electronic keys, a web site??

PGP Options - Smartcard support
Choose carefully. Not every brand is as much supported as the other.
1 usually key can handle several passwords. So it could for example
also be used as windows login.

-iKey: http://www.safenet-inc.com/products/ikey/index.asp
-Alladin: http://www.ealaddin.com/etoken/default.asp
-Gemplus: http://www.gemplus.fr/pss/id_security/
-Schlumberger: http://www.scryptosystems.com/SCRYPTOMEDIA%20eGate%201p%20uk.pdf

Personally I prefer keys over smart cards because the keys are smaller
and physically stronger. And most PCs already have a USB slot but very
few have a smard card reader.

I can't find any info about biometrics anymore. Sorry for that.
But there are for example mice that only work when your fingerprint is
detected.

Another thing you might consider is a USB pen (drive).
Those are 512KB-4GB 'harddisks'
You can easily store your PGP keyring on it. Just like PGP can store a
keyring on floppy. The added benefit of this method is that you can
also use it for transporting (little) files or store private
information. Price $14$900

The idea and use is quite simple but finding the one that fits best
with your wishes will take you some time investigating.

Good luck on the secure side!  :-)


-- 
Tony 
ah, yes, divorce..., from the Latin word meaning to rip out a man's genitals through 
his wallet. 



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-09-25 Thread Paul Cartwright
Hello Tony,

Saturday, September 25, 2004, 3:19:16 AM, you wrote:

T Choose carefully. Not every brand is as much supported as the other.
T 1 usually key can handle several passwords. So it could for example
T also be used as windows login.

thanks, I have parked and flagged your message !

T -iKey: http://www.safenet-inc.com/products/ikey/index.asp
I like this one.. the master key function sounds interesting.

but.. what happens if you LOSE the key or it gets stepped on or stolen??

T -Alladin: http://www.ealaddin.com/etoken/default.asp
T -Gemplus: http://www.gemplus.fr/pss/id_security/
T -Schlumberger:
T http://www.scryptosystems.com/SCRYPTOMEDIA%20eGate%201p%20uk.pdf



-- 
Best regards,
 Paul   



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-09-25 Thread Tony
Hello Paul,

Saturday, September 25, 2004, 1:20:41 PM, you wrote:

 Hello Tony,

 Saturday, September 25, 2004, 3:19:16 AM, you wrote:

T Choose carefully. Not every brand is as much supported as the other.
T 1 usually key can handle several passwords. So it could for example
T also be used as windows login.

 thanks, I have parked and flagged your message !

T -iKey: http://www.safenet-inc.com/products/ikey/index.asp
 I like this one.. the master key function sounds interesting.

 but.. what happens if you LOSE the key or it gets stepped on or stolen??

Yep that's a problem.
I have to say they are pretty strong and don't break easily.
In case of theft/loss the 1st thing you should do is change all you
passwords. That way the stolen key outlived its use.
But I assume you change passwords on every occasion you suspect
someone has read the Post-It on your monitor too :-)
I think it's also wise to keep a copy in a safe place.

The iKeys can also be password protected by a SOpin (System Operator
Pin) and a
user password.
The SOpin password should be a very strong one you write down and
store safely. The user password could be something simple.
In the iKey configuration software you can set the number of tries
before the iKey blocks. After it is blocked not even the right pin
will not grant you access.
Only the SOpin can open the iKey again. That's why the the SOpin must
be extremely strong. As said just print that pin and put it in your
bank vault. If all goes well you never need it.

SecureBat! 
http://www.ccokc.org/articles/2004%20Articles/Jan04%20Articles/Jan04_Lockdown%20e-Mail_Rice.htm
BTW I have no idea why RitLabs charges $80 for a iKey..

As you should have guessed by now I have a iKey :-)
I didn't originally buy it for PGP. Later on I noticed that PGP
doesn't support my iKey version.
So choose the right type. Also buy the one with the most space you can
find. Some solutions require a 'lot' of storage space


T -Alladin: http://www.ealaddin.com/etoken/default.asp
T -Gemplus: http://www.gemplus.fr/pss/id_security/
T -Schlumberger:
T http://www.scryptosystems.com/SCRYPTOMEDIA%20eGate%201p%20uk.pdf



-- 
Tony 
A clever man commits no minor blunders.  



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-09-24 Thread Mica Mijatovic
   ***^\ ._)~~
 ~( __ _o   Was another beautiful day, Tue, 21 Sep 2004, 
   @  @  at 15:22:19 -0400, when Paul Cartwright wrote:


 Hello Mica,

 Tuesday, September 21, 2004, 2:50:35 PM, you wrote:

MM This eMale thinger gotta spillclicker with all sortsa kewl scwiggly red
MM lans undur everthung just to show me am awrite. (c)

MM Lo again, a magic number - 99 characters!


 this is a very old tactic, but I've never used such LONG words..
 another good way is to use a phrase ( OR TWO :) and substitute numbers
 for letters: say  one at a time
 0n3 @t a t!m3
 change all vowels to non-alpha characters.
 [EMAIL PROTECTED] is that long enough??

You never know until you try. :grin:

Thomas said they already have some enhanced dictionary attack
technics, which would crack such passwords for a shorter time than
before, but I haven't tested any. Would be interesting to know how those
crackers of the new generation manage with a mix of Cyrillic and other
letters derived from Latin ones, and with various letter's
arrangements/layouts transposing 8-bit characters to 7-bit ones.

As I know dictionary attack would have no a way to resolve such a
puzzle, so the only effective attack would have to go step by step, or
character by character, and in ascending/descending order. Therefore,
if you want to get in time, you use characters around the middle. (-;

Anyway and whatever could happen, a longer means more time, as I
understand these cracking technics. (-: More time - good, positive.
Fast - bad, negative.

-- 
Mica
PGP key uploaded at: http://pgp.mit.edu/ once just before breakfast
[Earth LOG: 23 day(s) since v3.0 unleashing]

pgpjwbRxM3VoC.pgp
Description: PGP signature

Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Pgp Software

2004-09-24 Thread Tony
Hello Mica,

Friday, September 24, 2004, 3:24:06 PM, you wrote:

 You never know until you try. :grin:

 Thomas said they already have some enhanced dictionary attack
 technics, which would crack such passwords for a shorter time than
 before, but I haven't tested any.
I think Thomas refers to what I know as morphing attacks.
Indeed such an attack could be faster if the word is only slightly
changed like w!nd. But when the word gets mutilated enough a morphing
attack won't have much success. It just becomes a brute force attack.
Just download one of the many RAR password crackers as a test.
1-4 chars is very fast 5 chars gets hard. And on 6 chars we already
talking about weeks. Using only chars found on the keyboard there are
about 102 different chars. That means that breaking it takes 102x
longer for every char added.
BTW lots of software just waits a second before it processes the
entered password. That means only 1 password per second will be
tested; no matter how fast the hardware is.
Using some Alt+... chars greatly increases the entropy of a password.
° = alt+248  or ƒ= alt+159  all typed on the numeric keypad and easy to
remember.
Personally I have a list with passwords like th798*3%5ƒ#ö%
No way I can remember them but you can store them in bookmark
programs. So you have to remember just one password. Or use a
electronic key.
PGP supports several electronic keys and even biometrics IIRC.
An electronic key is just a little USB key that fits on your key ring.
(a real key ring like the one you keep your car keys on)
Stick it in a USB slot and PGP will detect it and opens the key ring.
Nothing to remember and very high entropy passwords. Enough to match
the security of PGP itself. They cost around USD 30






-- 
Tony 
Why isn't there mouse-flavored cat food? 



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-09-24 Thread Paul Cartwright

Hello Mica,

Friday, September 24, 2004, 9:24:06 AM, you wrote:

MM As I know dictionary attack would have no a way to resolve such a
MM puzzle, so the only effective attack would have to go step by step, or
MM character by character, and in ascending/descending order. Therefore,
MM if you want to get in time, you use characters around the middle. (-;

I'll continue to use what I can remember.. The older I get, the less I
can remember :)

MM Anyway and whatever could happen, a longer means more time, as I
MM understand these cracking technics. (-: More time - good, positive.
MM Fast - bad, negative.

this is true. But really, what is it I am protecting, and how bad do i
want to protect it? There aren't that many passwords that i have that
are really that important to me, who would really want them??
and if they got them, could they hurt me?? probably no, most of the
time. especially with PGP and an encrypted message! I don't use it much,
but if things get sensitive, I can always use it!
-- 
Best regards,
 Paul   



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-09-24 Thread Paul Cartwright

Hello Tony,

Friday, September 24, 2004, 12:03:05 PM, you wrote:

T Personally I have a list with passwords like th798*3%5ƒ#ö%
T No way I can remember them but you can store them in bookmark
T programs. So you have to remember just one password. Or use a
T electronic key.

last place I worked, we had these key fobs, that had a digital readout
that changed every 60 seconds. It was synched to our servers, so when I
logged in, I had a password AND used the digits from that fob.
that was nice when it worked, and it was HLL when it didn't.

T PGP supports several electronic keys and even biometrics IIRC.
T An electronic key is just a little USB key that fits on your key ring.
T (a real key ring like the one you keep your car keys on)
T Stick it in a USB slot and PGP will detect it and opens the key ring.
T Nothing to remember and very high entropy passwords. Enough to match
T the security of PGP itself. They cost around USD 30

tell me about these electronic keys, a web site??




-- 
Best regards,
 Paul   



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-09-23 Thread Mica Mijatovic
   ***^\ ._)~~
 ~( __ _o   Was another beautiful day, Tue, 21 Sep 2004, 
   @  @  at 18:23:11 -0400, when rich gregory wrote:


MM 05x1ca9PMAMCEkaban1ca [again a magic number, 22]

MM This eMale thinger gotta spillclicker with all sortsa kewl scwiggly red
MM lans undur everthung just to show me am awrite. (c)

MM Lo again, a magic number - 99 characters!


 So what is this magic number reference?

:-) I'll just shortly add some concrete comments to what I already have
explained to you and Thomas:

22 - might be memorized as two couples; or Catch-22 (-: Or 2+2=4,
therefore a news, a voice, a rumor... related to two couples; or
a double connection.

26 - could be memorized as a couple in sex, but also as 2+6=8, when
you get a worry (8) out of it. (-:

99 - might be memorized as two happiness, or double happiness, or
not rounded $, or 9+9=18, therefore an ace (1) is worrying (8)/taking
care, or as the hexagram 18 in I Ching [18 Ku, Work on What Has Been
Spoiled (Decay)].

Etc. (-:

-- 
Mica
PGP key uploaded at: http://pgp.mit.edu/ once just before breakfast
[Earth LOG: 22 day(s) since v3.0 unleashing]
When purpose and pleasure are brought together, work becomes play. Every
bit of work done in this spirit strengthens the man who does it. It is
recreative as well as creative. -- All Work Is Play, by Ernest Wood
http://www.innerself.com/Lifestyle_Changes/work_play.htm

pgpSH2mnBBXeQ.pgp
Description: PGP signature

Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Pgp Software

2004-09-23 Thread Mica Mijatovic
   ***^\ ._)~~
 ~( __ _o   Was another beautiful day, Thu, 23 Sep 2004, 
   @  @  at 01:38:52 +0700, when Thomas Fernandez wrote:

 I'm relieved. :-)

(-:

MM  But the model is relevant. Let's
MM take this sentence:

MM Yew pookin' fun at ma littercrasy (c)
 [...]
MM [EMAIL PROTECTED] [you see, you dent it a bit on some places]

 I see the dent but I could never remember the encoding. I'm not
 fluent in this hax0r encoding of characters, and on top of it, I
 would have to mis-spell the sentence *and* dent it a bit... too much
 to remember.

So you see: various people, various mnemotechnic. It came out as a
result of my fight with non-sensical random passwords.



MM Lo again, a magic number - 99 characters!

 I would also like to know the story behind these magic numbers.

OK; for you and Rich.

Magic numbers are also just a mnemotechnic trick. (-: [Actually all
numbers are magic, and 0 (zero) is most magic of all of them, since it's
the mother of all numbers; like the silence is mother of all music.] If
I remember the number of characters in a password, it can help me
additionally in recalling it.

You may use even simplest and most trivial numerology definitions,
as the ones coming from Gypsy's numerology:

1 - ace, beginning, a start, a new
2 - a couple/pair, connection
3 - conversation
4 - a voice (distant), news, rumours
5 - success
6 - sex(ual)
7 - an encounter
8 - a worry/concern
9 - happiness
10 - a love

All the rest are (or might be [interpreted as]) combinations. (-:

 Are we veering OT?

I don't think so. We scrutinize technics related to passwords under the
subject Pgp Software we work with, using TB.

-- 
Mica
PGP key uploaded at: http://pgp.mit.edu/ once just before breakfast
[Earth LOG: 22 day(s) since v3.0 unleashing]
Didn't hear from you long time - Beethoven

pgppGYNaNYT53.pgp
Description: PGP signature

Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Pgp Software

2004-09-22 Thread Thomas Fernandez
Hello Mica,

On Tue, 21 Sep 2004 20:50:35 +0200 GMT (22/09/2004, 01:50 +0700 GMT),
Mica Mijatovic wrote:

MM [EMAIL PROTECTED]K0JI

 Come on. You are posting your password on a public list? I don't
 believe you for a moment. ;-)

MM Nein. Das ist just a sample/example of what I was talking about.
MM Naturally is that it's not usable now.

I'm relieved. :-)

MM  But the model is relevant. Let's
MM take this sentence:

MM Yew pookin' fun at ma littercrasy (c)
[...]
MM [EMAIL PROTECTED] [you see, you dent it a bit on some places]

I see the dent but I could never remember the encoding. I'm not
fluent in this hax0r encoding of characters, and on top of it, I
would have to mis-spell the sentence *and* dent it a bit... too much
to remember.

MM And this one below is, you believe or not, the verse from a folk song:

MM 05x1ca9PMAMCEkaban1ca [again a magic number, 22]

MM ...so you are able not only to memorize it but you can *sing* it,

Nice idea, but before using it, you have to encode the verse into the
character string above. I am happy that it works for you, but it
doesn't for me. You're a lucky man. :-)

MM Lo again, a magic number - 99 characters!

I would also like to know the story behind these magic numbers.

Are we veering OT?

-- 

Cheers,
Thomas.

7.Ihr Nachbar geht Ihnen auf den Wecker, weil er nachts um vier so
  laut klopft, das die Gaeste Ihrer Techno-Party dauernd aus dem
  Rhythmus kommen.

Message reply created with The Bat! 2.12.02
under Chinese Windows 98 4.10 Build  A 





Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-09-22 Thread Thomas Fernandez
Hello Paul,

On Tue, 21 Sep 2004 15:22:19 -0400 GMT (22/09/2004, 02:22 +0700 GMT),
Paul Cartwright wrote:

PC this is a very old tactic,

Substitution of letters is the oldest encryption technique in the
world, IIRC.

PC another good way is to use a phrase ( OR TWO :) and substitute numbers
PC for letters: say  one at a time
PC 0n3 @t a t!m3
PC change all vowels to non-alpha characters.

A modern dictionary attack will find the words whether you substitute
the vowels with the standard other characters or not.

-- 

Cheers,
Thomas.

If you look like your passport picture, you probably need the trip.

Message reply created with The Bat! 2.12.02
under Chinese Windows 98 4.10 Build  A 





Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-09-22 Thread Paul Cartwright

Hello Thomas,

Wednesday, September 22, 2004, 2:41:22 PM, you wrote:

TF A modern dictionary attack will find the words whether you substitute
TF the vowels with the standard other characters or not.

yuck, I guess I'm behind the times.. good thing I stopped doing that
years ago:)

-- 
Best regards,
 Paul   



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-09-21 Thread Mica Mijatovic
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

   ***^\ ._)~~
 ~( __ _o   Was another beautiful day, Mon, 20 Sep 2004,
   @  @  at 21:46:19 -0400, when Paul Cartwright wrote:

 you would memorize a novel for a password :) ???

No, it would be too much for me. I rather write what I already have
memorized. (-:

[EMAIL PROTECTED]K0JI

Writing English using Cyrillic letters with few misspellings I find
better than dic(e)ing out a random password which I CAN'T memorize
at all. (I have to have some sense to be able to remember it.)

Chess moves are also fine.

Page, line and word numbers of some book...

- --
Mica
PGP key uploaded at: http://pgp.mit.edu/ once just before breakfast
[Earth LOG: 20 day(s) since v3.0 unleashing]
-BEGIN PGP SIGNATURE-

iD8DBQFBUECw9q62QPd3XuIRAp9SAJwLKYlWepvYm577/ImPz20bLPAv5ACeICE4
SfyYC/JPDpJgKLnUeFQyo7U=
=IutS
-END PGP SIGNATURE-



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-09-21 Thread Thomas Fernandez
Hello Mica,

On Tue, 21 Sep 2004 16:54:41 +0200 GMT (21/09/2004, 21:54 +0700 GMT),
Mica Mijatovic wrote:

MM No, it would be too much for me. I rather write what I already have
MM memorized. (-:

MM [EMAIL PROTECTED]K0JI

Come on. You are posting your password on a public list? I don't
believe you for a moment. ;-)

-- 

Cheers,
Thomas.

When your dad is mad and asks you, 'Do I look stupid?' don't answer.
- Hannah, age 9

Message reply created with The Bat! 2.12.02
under Chinese Windows 98 4.10 Build  A 





Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-09-21 Thread aceman


MM [EMAIL PROTECTED]K0JI

 Come on. You are posting your password on a public list? I don't
 believe you for a moment. ;-)


No, it's true. Thankfully he uses the same password for *everything* too   ;)

-- 



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-09-21 Thread Mica Mijatovic
   ***^\ ._)~~
 ~( __ _o   Was another beautiful day, Wed, 22 Sep 2004, 
   @  @  at 00:34:02 +0700, when Thomas Fernandez wrote:

 Mica Mijatovic wrote:

MM No, it would be too much for me. I rather write what I already have
MM memorized. (-:

MM [EMAIL PROTECTED]K0JI

 Come on. You are posting your password on a public list? I don't
 believe you for a moment. ;-)

Nein. Das ist just a sample/example of what I was talking about.
Naturally is that it's not usable now. But the model is relevant. Let's
take this sentence:

Yew pookin' fun at ma littercrasy (c)

We can remember the *sense* (it's very important for those who cannot
remember insensible things, at least when is word about passwords), and
we can additionally make it a bit, or two, harder for dictionaries to
work on it, this way:

[EMAIL PROTECTED] [you see, you dent it a bit on some places]

So, you get an adult (more than 8 characters) password, protective(ly?)
potent, of 26 (the magic number) characters -- and you are still *able*
to remember it! Since it has a *sense*.

Voila!/There!

And this one below is, you believe or not, the verse from a folk song:

05x1ca9PMAMCEkaban1ca [again a magic number, 22]

...so you are able not only to memorize it but you can *sing* it,
humming, whistling, or using any other instrument. And if you can *sing*
your password, believe me, you *never* will be able to forget it. But,
if even this happens to you, which is highly impossible - you will hear
it on the *radio*! (-: Or on TV, or you could hear people around singing
your password. How the heck you could ever then lose it? (: All this
people around are taking care of it.

If you like my method, you may practise with this sentence:

This eMale thinger gotta spillclicker with all sortsa kewl scwiggly red
lans undur everthung just to show me am awrite. (c)

Lo again, a magic number - 99 characters!

-- 
Mica
PGP key uploaded at: http://pgp.mit.edu/ once just before breakfast
[Earth LOG: 20 day(s) since v3.0 unleashing]

pgpCdnGEOXVYu.pgp
Description: PGP signature

Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Pgp Software

2004-09-21 Thread Paul Cartwright

Hello Mica,

Tuesday, September 21, 2004, 2:50:35 PM, you wrote:

MM This eMale thinger gotta spillclicker with all sortsa kewl scwiggly red
MM lans undur everthung just to show me am awrite. (c)

MM Lo again, a magic number - 99 characters!


this is a very old tactic, but I've never used such LONG words..
another good way is to use a phrase ( OR TWO :) and substitute numbers
for letters: say  one at a time
0n3 @t a t!m3
change all vowels to non-alpha characters.
[EMAIL PROTECTED] is that long enough??

-- 
Best regards,
 Paul   



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-09-20 Thread Paul Cartwright

Hello aceman,

Sunday, September 19, 2004, 5:52:13 PM, you wrote:

abc In my own usage of PGP Disk, I have moved my mail base,
abc newsgroups data, my browser preferences/cache/favourites etc. My
abc Documents and my IM (Instant messaging) profiles and as many user
abc preferences as possible, to run off the PGP disk which itself
abc needs to mounted at logon for them to be available to the user (Me).
^^^
so you need to mount that disk before you can login in with AIM ( or use
your browser, or TB. How do you get the PGP disk mounted at logon, is it
loaded first, or does it matter?

abc Advantages:

abc - User data (anything inside the container) is encrypted with
abc strong encryption and cannot be accessed without passphrase.
abc - Makes backing up data easy as only the one PGP container needs to be backed up.
assuming you move everything to a PGPdisk first.   and basically that's
what My Documents is for, so all your data is in one place.

abc - Programs can be installed to a PGP Disk also. Again, they
abc are only available while the disk is mounted.

then you have to uninstall and reinstall all your apps, so they point to
the PGPdisk, or at least change the default folders or SAVE-AS..



abc Disadvantages:

abc - If you forget your password, you've had it!

I really hate it when that happens:)

abc - As with all virtual disks it can be corrupted (although
abc in my 3 years of using PGP disk this has never happened to me but I
abc should warn you nonetheless).

anything is possible, I really understand that !

abc - Containers are only encrypted when they are dismounted.
abc When mounted the data is as available as any other hard drive data
abc would be (e.g. they will be available over a network - file and
abc print sharing etc.)

for viruses, trojans, worms, hackers.. same as with all normal files.
and they usually stay mounted, so where is the extra security? in case
the drive gets stolen?
I mean, if I use TB all the time, and keep TB loaded, the PGPdisk has to
stay mounted, so it provides no extra security.


-- 
Best regards,
 Paul   



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-09-20 Thread Mica Mijatovic
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

   ***^\ ._)~~
 ~( __ _o   Was another beautiful day, Mon, 20 Sep 2004,
   @  @  at 15:53:36 -0400, when Paul Cartwright wrote:

 so where is the extra security? in case
 the drive gets stolen?
 I mean, if I use TB all the time, and keep TB loaded, the PGPdisk has to
 stay mounted, so it provides no extra security.

I don't use that PGP disk, but Scramdisk, and judging by the description
I had read on, they work on same principle (with difference that
Scramdisk needs no installation, and is able to work from a diskette;
just one exe and dll). Scramdisk will dismount all containers
automatically once Windows is restarted or shutdown, so this is the only
advantage; that is, nobody could access the files you keep in
containers, without passwords, even if your HDD is stolen. (I like
Scramdisk's password mechanism as well: you may set a set of 4 x 40+
characters as a password. (-: Therefore, you could write a novel, in a
weirdest language you could imagine/create. Lots of time to crack it
down.)

:grin:

- --
Mica
PGP key uploaded at: http://pgp.mit.edu/ once just before breakfast
[Earth LOG: 20 day(s) since v3.0 unleashing]
-BEGIN PGP SIGNATURE-

iD8DBQFBT2Cc9q62QPd3XuIRAvabAJ9dlvlYEIfjJpNXicFEmBrQEGiHggCdHn0h
O0D5D0kss+iNwEXpwAnTTi8=
=UGue
-END PGP SIGNATURE-



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-09-20 Thread Paul Cartwright

Hello Mica,

Monday, September 20, 2004, 6:58:38 PM, you wrote:

MM (I like
MM Scramdisk's password mechanism as well: you may set a set of 4 x 40+
MM characters as a password. (-: Therefore, you could write a novel, in a
MM weirdest language you could imagine/create. Lots of time to crack it
MM down.)

you would memorize a novel for a password :) ???


-- 
Best regards,
 Paul   



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-09-19 Thread Costas Papadopoulos
Hello Barry,
Sunday, September 19, 2004, 9:54:00 PM, you wrote (possibly edited):
 Hello all, I've today downloaded the PGP software and I'm going to
 have a dabble. Do any of you who use the software purchase it, are
 there any advantages to buying it over the free version

I suggest http://www.mccune.cc/PGP.htm as a good starting point.

-- 
Best regards,
 Costas



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-09-19 Thread aceman

On Sun, 19 Sep 2004 19:54:00 +0100, Barry Jones [EMAIL PROTECTED] wrote:

 Hello all, I've today downloaded the PGP software and I'm going to
 have a dabble. Do any of you who use the software purchase it, are
 there any advantages to buying it over the free version
 

IMO an excellent advantage is the addition of PGP Disk (not available in the freeware 
version).

-- 



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-09-19 Thread Paul Cartwright

Hello aceman,

Sunday, September 19, 2004, 4:02:16 PM, you wrote:


abc IMO an excellent advantage is the addition of PGP Disk (not
abc available in the freeware version).

explain PGP disk to me please. Why do you use it, and how does it work.
advantages and drawbacks??

-- 
Best regards,
 Paul   



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Pgp Software

2004-09-19 Thread aceman

 Sunday, September 19, 2004, 4:02:16 PM, Paul wrote:


 IMO an excellent advantage is the addition of PGP Disk (not
 available in the freeware version).

 explain PGP disk to me please. Why do you use it, and how does it work.
 advantages and drawbacks??

Well the best explanation can probably be found at: 
http://www.mccune.cc/PGPpage2.htm#PGPdisk

but I will try to explain it a little for you.

Basically PGP Disk allows you to create virtual hard disks. These are simply an 
encrypted container(s) (basically just a file on your hard disk) which you can mount 
as a system drive e.g. D:, E:, F:, G: etc. etc and it acts just like a hard drive.

This disk can be mounted and dismounted as you wish and it is protected by either a 
passphrase or your PGP key (or even both).

In my own usage of PGP Disk, I have moved my mail base, newsgroups data, my browser 
preferences/cache/favourites etc. My Documents and my IM (Instant messaging) profiles 
and as many user preferences as possible, to run off the PGP disk which itself needs 
to mounted at logon for them to be available to the user (Me).

Advantages:

- User data (anything inside the container) is encrypted with strong encryption and 
cannot be accessed without passphrase.
- Makes backing up data easy as only the one PGP container needs to be backed up.
- Programs can be installed to a PGP Disk also. Again, they are only available while 
the disk is mounted.

Disadvantages:

- If you forget your password, you've had it!
- As with all virtual disks it can be corrupted (although in my 3 years of using PGP 
disk this has never happened to me but I should warn you nonetheless).
- Containers are only encrypted when they are dismounted. When mounted the data is as 
available as any other hard drive data would be (e.g. they will be available over a 
network - file and print sharing etc.)

HTH

-- 



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html