Gwebs Cryptographer

Social networking seems to be pop right now, how many people you know that they use / don’t use social network applications like Facebook, Twitter, MySpace, Orkut, XiaoNei (校内 in China), or other ones. Can you honestly say that you have never even heard of these applications ? Yeah, that’s what I thought.. These apps are integrating to our daily life, and eventually someone will ask “How we kept in touch with our friends before social networks?” Just like my friend’s kid asked me once that “What you were doing at work before internet?”. I think these questions will make people to think that how dependent they really are about technology and services.

But more interesting is that how many people really trusts into these open and free networks. Some time ago Facebook got so much publicity when they announced that all data what users have put in it will be theirs, so basically all the personal data, pictures, videos, etc. Then just a bit later, they told to users that there are no worries, that everything will be just fine. And now, hardly no-one even remembers that anymore.

It seems to be that internet is so full about different kinds of social networks and applications which are collecting users private data. And I think it will be only the matter of time when someone will steal all that data, ’cause normally these services are not having so strong security. One reason might be the money issue, although I guess nowadays quite many people will be interested to pay a bit for example the usage of Facebook, if they can be sure that all their data is secured. But on the other hand, there are plenty of users who think beforehand that what information they are willing to share and which information not. And just like Barack Obama advised kids, that be aware that once you post something into the internet, you can be sure that I will be digged up later, if it can be used against you. So maybe it will be nice to take a look for Facebook Etiquette as well, although most of these things are more or less self-evident, but I think still worth of reading through.

I read a couple of articles some days ago about privacy and security issues in social networks/webs, just like Facebook, MySpace, Twitter, and so on. (Links to the articles at the end.) These articles are mostly pointing out the same issues which I wrote above, that it’s really users own responsibility what to share and for whom to share it. So many instances are following social networks also like friends, colleagues and family, everybody you like but also quite many you maybe haven’t thought about. Like your boss, different organizations and companies, so basically if you’re planning to apply for a new job, it might be that your profile will be checked through before you will get invitation to the interview. And also talking about that in social network, might make your boss feel unease.

But that’s not everything about privacy issues, there’s also some other things to point out as well. Nowadays, it seems to be that mobile phones are getting closer to laptops and vice versa, so it’s quite normal to update social network profiles through mobile phone. And for up-to-date user it might be self-evident to have anti-virus software also in a mobile phone, but I can tell for sure that most of the users don’t have, any kind security software in their mobiles “I don’t need it, this is Just a phone”, but anyway the users are using all the same programs and applications as with computers. So, basically all the data what user is keeping in secret in his/hers computer, user will freely use in mobile, without thinking that the same “evil”-internet is waiting there as well.

The thing which I brought up the mobile phones into this also, is that what makes people think that if they use one secured system in one place, it won’t be useful, if they use same data with non-secured systems elsewhere. And this includes everything, not only social networks, but emails, contacts, files, pictures, etc.

A while ago there was news about new type of identity / private data phishing, basically there are some applications within social networks, which are collecting different kind of data from users. And then some identity thiefs have been using that data to create virtual-friends for users. So the main idea is that these virtual-friends are sharing something common with user, belonging to same groups or have same interests, then they’re sending friend requests to users. And if user will accept their request, then they will collect all data from that user, what they think is useful for them. Maybe email addresses, phone numbers, street addresses, photos, videos, etc.  So nowadays it’s really recommended for people to check what kind of information they are sharing from themselves and are they really willing to tell all their secrets or thoughts to everyone.

I personally like social networks a lot, and I like that there’s some place where I can enter almost from anywhere to check how my friends are doing and letting them know what’s up in my life as well. I haven’t paid much attention for security issues in social networks, but now after reading these articles, I might take another look for some apps properties and privacy options.

Some of you might think now, that what will be my result to solve these privacy issues, well frankly speaking there is no solution. I can only encourage everyone to think twice before posting anything to social networks,  text, comments, pictures, video, files, etc. what ever is on your mind. Sometimes you might think that with this post your friends appreciate you more or you will get publicity, but be aware that all that data will be saved somewhere and it might pop-up later, when you cannot expect it to happen.

Here are the links for the articles I mentioned earlier:
Fast Company’s article: Privacy and Security Issues in Social Networking
Computer World’s article: Protect your privacy on Facebook and Twitter

Some other articles related to this topic:
Google Warns of Privacy Issues on the Social Web
Exclusive: U.S. Spies Buy Stake in Firm That Monitors Blogs, Tweets

Security, email, personal, privacy, software application, email, Facebook, Mobile, myspace, orkut, privacy, Security, social network, software, twitter, xiaonei

Almost every week I can read news about smaller or bigger scandals about passwords or private data exposures. What’s wrong with today’s users ? Lack of common sense or are people just getting more and more stupid ? So many times I have faced these situations that someone is asking my email address and password, just for checking my address book. Or then the Microsoft Messenger trick “See who have blocked you from their MSN”. Or the one with credit card number “So many credit card numbers are exposed, check if your one is on the list”.

Come on, how easy can average user really be ?
I really think that people are getting more and more reliable on internet and all the services, but they really cannot see that there are also thiefs and other “bad people” around. So many of us are thinking that of course it’s safe, because it’s somehow related to service what user is using. But at the same time on the streets when someone is humbly asking to borrow their phone they get scared that the person will steal it or use it for illegal activities. Why this question never comes into their minds when acting in internet ?

At this time, a bit more than a week ago, Google’s Gmail and Yahoo’s Mail were also targeted by a large-scale phishing attack, perhaps the same one that harvested at least 10,000 passwords from Microsoft’s Windows Live Hotmail, according to a report by the BBC.

The BBC also said it has seen a list of some 20,000 hijacked e-mail accounts; the list included accounts from Gmail, Yahoo Mail, AOL, Comcast and EarthLink. The latter two are major U.S. Internet service providers.

I assume that when people are reading these news, they are first over sensitive, maybe one week, after that paying attention what they do online and where they use their passwords, max. one month. And after this, they start acting like before. Maybe that one month they haven’t seen any progress of safety or increased privacy, so “it’s okay to continue the old style, no-one is interested about MY emails and passwords“. But this way of thinking is just that what might lead to scandals. Everyone’s email account is interesting, not necessarily the emails or the content itself, but all Your addresses, contacts, your passwords and login info for everywhere else, because still on these days normally the login infos are posted to one’s email, when starting to use new services.

And also one other thing, which I think is very important here, is that so many users used to use same passwords for different places. I know by myself, that it will be very difficult to remember all the passwords if they are just randomly made. For example 20 passwords for tools at work, 5 for your own emails, 20 for other services online (social networks, online banking, bookstores, games, etc.) And I’m not encouraging people to write them down, but just inventing some patterns to remember them or then using some other tools for securing all those passwords. I know that there are so many nice software available, which are taking care of your passwords, but for me, I don’t know can I trust them or not.

Here are links for more information about this scandal:
http://www.infoworld.com/d/security-central/gmail-and-yahoo-mail-passwords-exposed-737
http://www.techradar.com/news/internet/exposed-the-great-password-scandal-596064
http://www.computerworld.com/s/article/9139000/Gmail_Yahoo_Mail_join_Hotmail_passwords_exposed

Here is nice collection of hints and tips for boosting online security:
http://www.techradar.com/news/internet/10-easy-ways-to-boost-your-online-security-591191

Security, email, google, personal, privacy AOL, BBC, email, gmail, Hotmail, Internet Security, microsoft, MSN Live!, privacy, Yahoo! Mail

Back at the old times, when I was a active student I used to use email a lot, for writing to my study-mates for setting up groupworks, to my professors to ask questions, for my family to keep in touch. Email started to be one of the main communication way. It was just so easy, fast and convenient. You don’t have to wait that the other person is available, you can write it a bit, save it and continue later, so you don’t have to bother someone many times to get all the information you really need. You can use email almost anywhere, especially if you’re using any kind of webmail, just have internet connection - log in and handle your mails.

Now when I’m looking back in time, it was really like that. But nowadays when all kinds of social networks and instant messengers (IM) are available, I can see that I’m not really using email so much anymore. It seems to be “too slow” way to contact people. I guess this technological awareness is really taking place in today’s daily life. People are getting so used to use different methods to keep in contact immediately. If one cannot reach you from any IM or social network, it might be that the person will give you a call or send a SMS. Just because they want to exchange the information now.

Sometimes I feel that it’s really distressing, that you have to be reachable always, because of projects, work, friends, family, etc. And if you are not reachable people will feel annoyed, it just seems that no-one is not allowed to have their own time anymore. And I’m not talking about vacations now, normally vacation time is sort of “holy-time” of course this depends pretty much that what kind of job you’re doing and what’s your responsibilities in the company. And who can say that after a couple of weeks vacation the email-inbox is empty ? I can tell you for sure, that mine is not. If there’s less than 100 emails I can be happy.

I made a little enquiry within our staff, that how they feel and use their email, encryption software and other software. This research was quite interesting, because the most of our staff is Chinese and I was quite amazed about some of the answers.

According this enquiry, I think usage of email is culture related, more or less. With this amount of data it would be close to impossible to hand out any inclusive report. I think that peoples’ opininions are anyhow quite different here in East that they are at West, I mean opinions among tech-related people. I won’t analyze the results themselves, just take a look and make your own judgement.

Well, here are the questions what we asked and also the results what we got. The results are in blue, that it will be easier to follow.

Enquiry -  We asked for short answers with arguments and here’s the conclusion.

Habits of e-mail usage ?
For what kind of communication you are using e-mail ?
For most of repliers e-mail is mostly used for work or business purposes, sending data, files, documents and pictures when the receiver is not reachable with instant messenger (IM).

How fast you’ll expect that the recipient will answer you  ?
The most of the people wish to get a reply within a same day, some even within one hour. Only a couple of answerer were satisfied if they will get reply within 2 or 3 days.

Do you check your email daily ? hourly ? weekly ? sometimes ?
Almost everyone is checking their email daily or several times per day.

How important e-mail is for you ? Can you live one week / one month without e-mail easily ? If you’re not able to check your emails will you go crazy ?
Here the answers were basically divided into two, approx. half of the repliers told that they use email only for work or business, so they can live easily without it, and they won’t go crazy if they cannot check their email (of course depending if they will work that time or not). Then the other half seems to be more dependable about email, and they will go crazy if they cannot check their email even once within 3 days.

What did you expect when you first time used any kind of e-mail encryption software ?
Did you think that it will make your life more secured ? (From what?)
Almost everyone told that they feel more secured when they use email encryption, and the most common reason was privacy. They don’t like the idea that someone is snooping and reading their emails.

Did you thought that what might happen if you lose your encryption/decryption keys ?
Here also the answers were basically divided into two, the first group admitted that they didn’t thought that what might happen if they lose their keys. The other group seemed to have some experiences about this already and it seemed to be that someones are getting angry for the software for losing those keys, even if the fault was their own. And this normally led for changing the encryption software.

How did you felt when you used one (software) ? Did it effect immediately, giving you the emotion of security ? Or all the worries, “What if ?”
For everybody the first feeling was very positive, strong feeling that “now I’m secured”, but some of the repliers admitted that later they start to wonder with “what if?”-questions and also feeling annoyed of all inconveniences with the software, like reading email in many places, all the time feeling worried about the keys and so on.

When you tried some encryption software, did you think that “this is it!” I’ll use this forever or did you tried to find a better one, more secured one ?
The most of the answerers have been searching better ones after trying the first one. A Few told that they don’t mind to change their software but the current one is just fine too.

How do you feel about Free and Not-free software will it cause you feeling of trust/mistrust ?
All repliers think that free software is basically just for testing it and seeing the main features. And that the not-free ones are better, more reliable than free ones.

When you see free software, will you think how nice, there are still some kind people to offer this kind of tool free ? Or will you think that is there something behind “hidden” ? Will this company use my data for something else ? Maybe illegal activities ?
Quite many replier thought that there has to be something “hidden”, but still most of these repliers were not so interested if the company uses their data for something or not. Someones thought that the software can be free, ’cause the company will get funding from advertisements or from some foundations.

By which criteria you choose the software which you are using ? Free ? Well known ? Easy to use ?
Every single replier told that the most important things for their software is that it’s well-known and easy to use. If it is free of charge, even better, but someones said also that if the software is good enough, they will gladly pay for that it makes their life easier and more secured.

How you can trust that free software is really free ? or how you can trust that the software (what was SO expensive) is more trustworthy than the free one? Can you?
This question was made in purpose to be familiar with the earlier one. This question raised up the idea what I was willing to see.
If the company offers only   software which is free of charge the most of people don’t trust for it, but if they have for example products for individual use for free and for business use chargeable ones, then it’s fine. Then it’s the interesting part, the most of the repliers also thought that if the software is free of charge and open-source then it must be trustworthy, because basically anyone can check and modify the source code. Although, within security softwares this rarely happens, ’cause otherwise the hackers can see it too and then it’s not safe anymore.

Does the cost of software give you any kind of idea how good it might be or how trustworthy it is ?
The most of the repliers thought that the amount of money or cost is not really related for that how good it is. Quite often the most expensive one is having already so many features that it won’t be easy to use anymore.

Will you use any software which is delivered by government or other authority ? Why ?
Only one of the repliers is using software delivered by government and only because it’s required by the other business partner. Other ones thought that they won’t use any software which is delivered by government, because the software might include some spy-ware.

Gwebs, Security, email, encryption, privacy, software email, encryption, enquiry, Gwebs, IM, privacy, Security, social network, software

I guess most of the people have been following the news about “Bank screws up and sues Google”, which is very interesting news related to Email security. When I read this news at the first time, I just shaked my head and thought “This can only happen in USA”. And the worst thing here was that those emails were not secured at all, just basic emails full of customers’ private data.

I really cannot understand about the result that Judge orders Google to deactivate some random users accounts because of someone made a mistake, humane mistake. Especially one, whom these random users are not related to. I can say that I might go crazy if one day my email is de-activated without noticing it before, just because someone has sent some email to my email address which doesn’t belong to me.

The situation is easy to compare to non-digital world. Let’s think that post is delivering to your postbox someones bank statements, without being in a letter. Just papers to your postbox, will you feel safe ? Will you think that is that the common policy of this bank ? Anyone can read that information on the way, the staff at post office, the delivery guy and anyone who is just on the way. Will you also consider that it’s reasonable that the Bank will sue the owner of your postbox, because they made the mistake ? And even worse, do you think that it’s reasonable that they will vanish/seal up your postbox, ’cause there is some information that doesn’t belong to you.

For me, this all sounds so ridiculous. If someone needs to be sued or punished the person will be within the bank staff. Also I really feel unsafe for this bank, that they didn’t use any encryption for those emails. Anyway, I assume that they are using letters when posting bank statements to their customers, so why not using encryption when data is in digital form ?

Luckily, I’m not a customer of this bank, and I feel safe with my own bank accounts. Banks that I’m using are really investing money for security and also offering the best service for their customers. Of course the situation is currently better in Europe than it is in Asia, but Asia is growing fast, very fast. About USA I really cannot say, I always feel unsafe about money issues there. The credit card policies are so loose and all the security issues seemed to be popping up all the time. I guess it’s only the matter of time that people are getting annoyed for so bad and unsecured service.

But luckily on the mean time suing in US is so easy and convenient so why not suing everybody and make people suffer about mistakes, maybe the ones they couldn’t prevent at all, ’cause that’s what it’s all about. I’m really happy about Google’s services so far, but this case is just a bad example how vulnerable this huge company is also for crazy laws and policies in US.

Although, I don’t know where is better, maybe in Europe. I’m currently living in China and getting so frustrated about governmental actions to limit access to “out there”, I mean the Chinese Great Firewall (GFW) is really bugging my nerves all the time. But that’s another story.

Here is the case file for you to make your own judgement “The Rocky Mountain Bank Vs. Google” (pdf-file).

Security, email, encryption, google, privacy bank, email, encryption, google, privacy, Security

When I started my work at Gwebs, this was one of my first questions. I mean, so far that our own products don’t support mobiles, smartphones, pdas, etc.  Anyhow, our product co-operates nicely with all software that use GnuPG (GPG), it’s tested with quite wide scale of applications.

I wanted to know how I can access my encrypted messages whenever and wherever. I just got so dependent on mobile usage of email from my previous job at one telecommunications company, sometimes you just have to be there 24/7 available, for your colleagues all around the world, your customers and clients. This is it what’s going on right now within IT-industry. Although, no-one is paying me 24/7 salary, but it just integrated for me as a habit. And now, sometimes I found myself at the bus stop reading my email, thanks for the reasonable price of data transfer.

I made some research about this topic and found out that encryption with GPG in smartphones is not so common than I thought. Although, nowadays, when smartphones are having Windows Mobile, Linux, Android, Apple, Symbian and maybe some other operating systems too. It seems to be easier to find a solution for encryption from PGP (Pretty Good Privacy).

I found out that Symbian used to have one component, made by Nokia, but no-one really knows is it still usable or not. About Apple and Android I really cannot say so clearly, ’cause both systems are pretty unfamiliar to me. So far Apple seems to have quite much research and development around iPhone, so I’m pretty sure that there are some encryption software as well.

Windows Mobile then, there seems to be a huge gap between versions (5.0/6.0/6.1/6.5) while searching supported applications, anyhow there are some software for encryption available. I haven’t tested these yet by myself, but will do later. At first I’d like to have the official update for WM 6.5.

Well, Linux is another chapter of it’s own. There are so many free, open-source encryption software available that it will be more difficult to find the one which suits the best for your needs, than just find one.

The other solution for encryption in mobile devices is PGP (Pretty Good Privacy), it’s not open-source and normally these applications are not free. But this also makes the difference to availability. There are so many PGP applications available for all these operating systems that I mentioned earlier. And of course, while the software is not freeware, you can expect some support for troubleshooting and equivalent for your money.

Anyway, I think that this is one of the main things nowadays while talking about email security and privacy. Because so big share of today’s business emails are sent by mobile devices, it’s really needed to have some software to obtain privacy within this communication way too. And for covering usability issues, it’s nice to have a software which co-operates with the same encryption method as while using a PC.

I’ll let you know later about my testing, WM 6.5 + PGP or GPG encryption software + MailCloak in PC. Having my own key in every single device (work, laptop and smartphone). And then testing it out, how it works and how easy it is really to use. But that’s going to happen after the Windows Mobile 6.5 release, which suppose to be soon.

Gwebs, PGP, Security, email, encryption Android, Apple, email, Email Encryption, Email Security, encryption, GPG, Gwebs, linux, Mobile, PGP, privacy, Symbian, windows

Facebook, if you didn’t know already, asks you for your email address and password when you create an account, or even if you don’t. It’s a highly visible link on their homepage. The stated reason is so that you can send invite letters to your contact list. And you can’t blame the peeps for trying, right? We all gots our hustle. It’s just that Facebook’s particular hustle leaves a lot of room for doubt. It could be Facebook doing exactly what they claim to do and nothing else, or it could be that the largest data mining company in the world is applying to email what Nigerian scammers have been doing with bank accounts for years.

But it’s also a royal pain in the tuches to have to invite every one of your friends to your social networking site manually, and with the importance of social networking sites to many businesses, people in fields that require a little publicity, and people who really like attention, this is a useful feature.

Which is why this article from blogger Dragon’s Flag caught our eye. It’s not just a plug for our product (although an independent testimonial to how awesome we are it certainly is), it’s also a fantastic little piece of know-how that makes you kick yourself for not thinking of it. And so here it is, translated for your edification:

On National Day (October 1st), 2007, I created a Facebook profile, and as part of the registration process, Facebook asked for my email account and password. To test if Facebook poses a threat to social networks by doing this, I gave them my password. I can hand out my password to pretty much anyone who asks for it, but can you?

My email address is dragonflag@gmail.com, and there are over 3000 emails inside. (Facebook supports most of the major services, including gmail, hotmail, live, yahoo, aol, etc.) Before uploading my password, I changed it to 123456.

I’m a longtime user of the notable Gwebs WebmailSafety software. I have more than 50 people in my address list there, and all the email we’ve sent back and forth is stored on Google’s servers is encrypted using a RSA+AES mixed cipher. I’m definitely not worried about Facebook searching or selling my email, because they can’t understand a word of it.

So after I gave my password to Facebook, those 50-odd received their invitation letters, and after 30 minutes I changed it back. Everything was alright, and now Facebook and don’t owe each other anything, nor do we have to be concerned about one another.

I also used the same method to register at the domestic (mainland Chinese) social networking site XING.com, without any apparent danger to my privacy or data. My advice when dealing with commercial web service companies like this is not to trust them lightly. Their promises to you don’t mean a thing, and it’s never a bad idea to have some basic self-protection in place.

So take my advice, especially if you’re one of those people who haven’t invited their email contacts because you’re afraid of your email being searched or revealed.

Italicized text added by translator.

Encrypting his email, we approve of, and using our product to do it, we approve of even more. But another important step he’s taken is:

Before uploading my password, I changed it to 123456…and after 30 minutes I changed it back

This is very important, because people are often predictable when they create passwords, and even if you use “rules” to create less breakable passwords and change them regularly, if someone gets a sample or two of your work, they can figure out your formula, and you’re right back where you started. Change your password to a no-brainer before giving it to someone, and change it back as soon as possible.

The best advice here, though, is not to let a company that makes its living by selling highly specialized user data to advertisers rummage through your inbox. Using Gwebs WebmailSafety; which is free, remember; or any of the other programs on the market means that your email is safe from advertisers as well as hackers.

Security, email, encryption, marketing, passwords, personal, privacy address book, data mining, email, encryption, Facebook, password guessing, privacy, XING.com

One of the reasons we (yes, it’s a we now) at the Cryptographer are in this business is because we get to laugh at the messes we ourselves will never get into. Take, for example, Guo Li, a Hangzhou lawyer whose email was inadvertently “hung out to dry” online by Baidu (China’s search giant) and WanWang (one of China’s largest hosting providers). He sued for 1,000,000RMB (around $120,000), and the results speak for themselves.

I have translated the following article specifically for this blog.

Private Emails “Hung Out to Dry” for a Month, Victim Sues Baidu for
Violation of Privacy.
8-12-2007 3:35 A.M., Beijing Morning Post
After his private emails hosted in a Baidu (百度) account were posted online for more than a month, Hangzhou lawyer Guo Li (郭力) decided to sue Baidu Inc. and email services provider WanWang (万网) for 1,000,000 yuan in damages, claiming his communication privacy rights were violated. A judgment will be issued tomorrow at the Haidian District Court on this so-called “national precedent-setting email privacy case.” Guo Li stated at the conclusion of the trial, “It’s entirely possible to look into other people’s inboxes online, I’ve searched the information myself. This won’t be the last trial of this type.”

Read more…

Security, email, encryption, government, law, personal, privacy Baidu, email, email server, Internet Security, law, lawyer, privacy, search engine, Wanwang, 万网, 晒, 海淀区, 百度, 郭力, 金道律师事务所

Two news stories caught my attention this weekend. The first, “Wider Spying Fuels Aid Plan For Telecom Industry,” [NyTimes.com] is a great article describing the state of the NSA wiretapping investigation.  Most of my readers will have heard of the secret room at AT&T’s San Franscisco offices, which was built to mirror ALL of the data going into and out of AT&T. But the reporter for this excellent article turns up a ton of new information.

The N.S.A.’s reliance on telecommunications companies is broader and deeper than ever before, according to government and industry officials, yet that alliance is strained by legal worries and the fear of public exposure.

To detect narcotics trafficking, for example, the government has been collecting the phone records of thousands of Americans and others inside the United States who call people in Latin America…. The program dates to the 1990s, according to several government officials, but it appears to have expanded in recent years.

Terror, the government’s (not very good) excuse for renegigng on the 4th amendments promises of personal security, has nothing to do with drug trafficking.

In addition the article points to some further previously unknown facets of the government’s spying. A dedicated fiber optic cable mirroring all of Verizon’s traffic appears to have been uncovered during lawsuit depositions.

[what the accusing Verizon employee saw] “was decisive evidence that within two weeks of taking office, the Bush administration was planning a comprehensive effort of spying on Americans’ phone usage.”

The same lawsuit accuses Verizon of setting up a dedicated fiber optic line from New Jersey to Quantico, Va., home to a large military base, allowing government officials to gain access to all communications flowing through the carrier’s operations center. In an interview, a former consultant who worked on internal security said he had tried numerous times to install safeguards on the line to prevent hacking on the system, as he was doing for other lines at the operations center, but his ideas were rejected by a senior security official.

It doesnt say why his safeguards were rejected, but if the government is viewing all our telecommunications, that is bad enough - if they are negligently making that information available hackers, that is an even grater cause of concerns.

Security, government, law, privacy at&t, government, NSA, ny times, privacy, secret room, verizon

Encryption is extremely important, but its overuse can also lead to problems.

Five to reasons to use Encryption:

1) You are dealing with important government, company, or personal data – especially on laptops, flash drives, or portable hard drives.

The news these days is riddled with stories of public servant or big company data theft, often due to laptop or hard drive loss. If big companies lose their data that often, little companies and individuals must do it all the time (more often, probably, because they don’t have encryption mandates) – they just don’t make the news. If you encrypt your data properly, data theft is virtually impossible. Note too that encryption doesn’t preclude data loss - you should back up your important data as well. Read more…

Security, encryption, privacy communication, data security, email, encryption, files, internet, IT, privacy, protection, Reasons not to use Encryption., Reasons to use Encryption, Security, TrueCrypt, WebmailSafety

Yesterday’s news of Hushmail.com passing information to the US Government is alarming to most people who consider privacy important. We use encryption to protect our privacy against industrial spies, nosy intruders, and hackers; but most importantly, we use encryption to protect ourselves against governments, which are becoming more and more nosey.

Read more…

PGP, Security, email, government, personal, privacy Internet Security, privacy