TrueCrypt is a free open source disk encryption software that works on both Windows and Linux platforms. Data stored on an encrypted volume cannot be read (decrypted) without using the correct password/keyfile(s) or correct encryption keys. TrueCrypt does this by creating a virtual hard drive that will read and write encrypted files on the fly. The advantage of using TrueCrypt is that you need not download it everywhere. All you need are the files truecrypt.exe, truecrypt.sys and the volume file you create which you can carry on your flash drive.

Step by Step Tutorial on how to encrypt your hard disk or data or message using TrueCrypt

Step # 1: Download and install TrueCrypt

Step # 2: Once you Launch TrueCrypt, Click on “Create Volume” button. This launches the Volume Creation wizard that prepares the encryped drive location. Next, choose ” Create a Standard TrueCrypt Volume” and hit Next. Next, click on “Select File” button. Browse to a place where you want to store your encryped files. For example, let me create secret stuff. Note: This is not the file you want to encrypt. Think of this as a Folder Name which in turn would contain the files you want to encrypt later on. Hit Next

Step # 3: Next, you need to choose your Encryption Algorithm. The default AES is the accepted industry standard and pretty much sets the current bar on encryption. Select AES. Hit Next. If you want more information about the Encryption options, TrueCrypt has some information on Encryption Algorithms and Hash Algorithms.

Step # 4: Now, choose the size of the virtual drive. If you have an external hard drive or a flash drive which you want encrypted, then choose “Select Device” in the step above and put in the limit you want to set.

In this example, I want to create a single file which is confidential to me. So I choose a size of 100 MB.

Step # 5: Now choose your Volume Password. This is the most important step. TrueCrypt wants you to punch in like 20 something characters for a strong password. Although there is no minimum limit, the max limit is 64 characters. For 20 something characters, choose a passphrase instead of coming up with a strong password and then copying and pasting the password somewhere else in plain text.

Step # 6: Format the volume now. TrueCrypt gathers random information from your system including the location of your mouse pointer and uses this information to format the location you selected earlier. Note: When you hit the “format” button, you are not formatting or erasing your hard drive. You are ONLY formatting the drive location file which in this case would be the askstudent.secrets file I created earlier. Congratulations, you now have an encrypted volume location.

Step # 7: Now that you have an encrypted volume, how do you access or store files in that drive. In TrueCrypt, choose “Select File” and browse to the file, in this case secret stuff which you created earlier. TrueCrypt lists a list of drive letters available on your computer. I choose Z: Now, select the “Mount” button after which you have to enter the master password you created earlier.

Step # 8: Your virtual drive is now created. Go to My Computer and there will be a new one listed as “Local Disk Z:”. This is now like any other drive, only encryped. So you can drag and drop or use “save as” and save your files to this drive. Once you are done, in TrueCrypt, select the mounted drive(Z:) and then select the “dismount” button. Once you do this, all you are left with is secret stuff which you can then burn or zip it or email it or store it in your thumb drive.

NOTE: Facebook has recently updated their privacy policy and changed their privacy options. I updated this article to account for the new Facebook privacy settings.

http://www.root777.com/security/facebook-privacy-settings-guide/

Facebook is currently the most popular social networking website with over 250 million active users worldwide. Anyone who is 13 and over can sign up for a Facebook account and can add friends and share their most intimate information with their friends including pictures and personal information. While it can be fun and convenient to keep up with old friends and make new ones online, sharing too much personal information on these sites can be risky.

• Drunk pictures from that freshman frat party which your buddy tagged and now your coworkers and boss would be able to see.
• Status updates about your current relationship status or lack of
• Your phone number, contact information and more..

So how do you separate your “Facebook friends” but share stuff with your real friends?

Facebook gives its users options around privacy and security where you can configure privacy settings to restrict access to your Facebook profile information. So whether you are an established Facebook user or a new user getting your feet wet in the world of social networking, here are the top 10 privacy settings for Facebook you should follow to help protect your profile including photos and your personal information.

1. Create friends lists: This is probably the single most important and best privacy setting for Facebook.  Once you log into your Facebook account, click on the “Friends” page at the top. Once in there, on the left side of the Friends page, you will see under Lists different groups including some created by default. Now, click on the Create button to create your Facebook friends lists.

• Resist the temptation to start assigning your friends to the lists. Think of all the different categories first and create them.
• I have 7 different lists: Close Buddies, Family, Friends, High School, College, Facebook Friends and Work. This is a ranked list with the group I trust the most coming first.
• There are two default lists created by Facebook: Limited Profile and SMS Subscriptions.
• Once your lists are created, click on Friends under the Lists section which displays your entire friends list. Use the drop box to start assigning your friends to the different lists.
• You can assign a friend to multiple lists. However, I would highly recommend that you assign just one list to a friend.
• Updated to add: The reason I recommend to only assign a friend to a single list is that the less restrictive settings apply. For example, if you have a friend that is part of your close friends list (my least restrictive) and also part of say Facebook friends list(my most restrictive), the less restrictive settings would apply (close friends settings) unless you explicitly exclude a list from accessing something, say photos to Facebook friends, then if you have a friend that is part of both lists, they won’t be able to view the photos. So, be careful when assigning friends to lists.  – Thanks to Matt T for the question.

2. Customize your Facebook privacy settings:

Now, let us customize the privacy settings of your Facebook account. Hover over Settings and then click on Privacy Settings from the drop menu.

3. Block people on Facebook: If you block someone, they will not be able to find you in a Facebook search, see your profile, or interact with you through Facebook channels (such as Wall posts, Poke, etc.). Any Facebook ties you currently have with a person you block will be broken (for example, friendship connections, Relationship Status, etc.).

Block people on Facebook

4. Configure your Facebook Profile privacy: When you created and assigned your friends to the different friends lists, it did not enforce any privacy.

Facebook profile privacy

Under Privacy, select Profile which gives you Facebook privacy options on who can see what information in your profile.  This section is split into two parts: the basic section and the contact information section.

The Basic section helps you assign controls around your personal information like profile, status, photos, videos etc and a bunch of other options. Let us walk through each one of these settings.

• Profile: Use this control to decide who can see your profile information beyond the information available when someone searches for you. My recommendation is to select Only Friends.
• Basic Info: Use this control to decide who, upon reaching your profile, can see your basic information, which includes your Gender, Birthday, Hometown, Political and Religious Views, and Relationship Status. This is also the first option where you can customize using your friends lists. Somethings you probably don’t want to talk at work include sex, religion and politics. Time to put that into practice. Click on Edit Custom Settings and select Only Friends. Add lists under Except these people.

• Personal Info: Use this control to decide who, upon reaching your profile, can see your Personal Information, which includes your Interests, Activities, Favorites (music, movies, etc.) and your About Me section. Again, select Only Friends and go to edit custom settings and add friends lists with whom you don’t want to share this information.
• Status and Links: Use this control to decide who sees your Facebook status updates. In here you have couple options. You can either choose Only Friends or choose Some Friends. You can also decide whether you want your friends to subscribe to your status messages.

Facebook status message privacy

• Photos Tagged of You: This option lets you decide who can see your photos which you uploaded or which you or your friends tagged. You want to be very cautious on who can tag your pictures or who can view your pictures. Go to Edit Custom Settings and choose your friend lists. As always exclude groups as well. If you are still doubting why you should control this setting, check out this story on AskStudent on how Facebook busted an intern. So Kevin had this Halloween party to go to and emails his manager that he is taking off because of a family emergency in New York. Now Kevin is having a good time and wanted to share the pictures from the Halloween party. The problem: Kevin also was friends with his manager and/or coworkers on Facebook. The intern’s manager replies back to Kevin with a picture attached from his Facebook profile and copied the entire team on it. Moral of the story: Control who can see your status messages and pictures on Facebook.

Don't let this be YOU

• Videos Tagged of You: Use this option to choose who can see the videos that you shared or you or your friends tagged. Again, go to Edit Custom settings. Choose your friends lists and exclude certain groups.
• Friends: Use this control to see who can see the full list of your friends on Facebook. Now, for some this could be a bragging rights. Hopefully if that’s the case, you have lots of your friends tagged as “Facebook friends”.  In any case, choose Only Friends and under Except these people, start adding lists.

Facebook friends list privacy

• Wall Posts: Here, you can choose whether to even let people post on your Facebook wall in the first place by selecting or deselecting “Friends may post to my Wall” option. If you choose to let people post to your wall, go to Edit Custom Settings and choose either Only Friends or Some Friends option. I would recommend you choose Some Friends option and customize it.

Privacy options for your Facebook wall posts

• Education Info: This option lets you control who can see your education info on your Facebook profile. Again, go to Edit Custom Settings and choose who can see your education info. This is probably one of the options with the minimum restrictions.
• Work Info: This option lets you control who can see your work information, previous employment history and other work information you posted in your profile.

Phew! Now, if you want to verify how the privacy settings you just configured show up, you can see how a friend sees your profile.

See through the looking glass

5. Facebook Search privacy: You can control your visibility on Facebook, who can search for you, what they can see, and how they can contact you. While there may be reasons on why you may not want people to look you up on Facebook, if you made the decision to join the social networking community, try to embrace it. However, if you choose to remove yourself from Facebook search results

• Under Settings -> Privacy Settings, select Search
• Under search visibility, go to customize and uncheck the box for everyone on Facebook.
• My recommendation: Control what people can see and leave your search visibility to everyone.

You also have options around making your Facebook contact information private. Facebook lets you share your IM Screen name, your mobile phone number, your current address, your website and your email addresses. It is very important that you protect your contact information.

• Under Settings -> Privacy Settings, select Profile and then select Contact Information
• I would recommend that you make all the options to Only Friends except your Current Address which should either be No One or make it custom so only your close friends and family can see it. If any one else wants your contact information, they can call you and you can choose to give it to them.

Facebook Privacy settings for contact information

6. Facebook and search engines: Your public search listing is a version of your search result that is available to people who search for you even when they are not logged in to Facebook. Content that you make available through your public search listing may be available on search engines or on public-facing Facebook pages.

Being displayed on search engines is a great way for people to get in touch with you. Facebook search results tend to rank pretty high so if someone wants to get in touch with you, this is an excellent opportunity. However, you don’t want to reveal too much information at the same time.

• Under Settings -> Privacy Settings, select Search
• Under Search Result Content, use the checkboxes to control what people can see in addition to your name.
• I would recommend just select your profile picture and the links to add you as a friend and a link to send you a message.
• Also, you also have to check the box next to “Create a public search listing for me and submit it for search engine indexing”.

Facebook public search listing privacy options

So, when someone is searching for you on Google or any other search engines, your profile would look something like this.

Sample public search listing on Facebook

7. News Feed and Wall: This option lets you control what recent activity is visible on your profile and in your friend’s home pages. Remember that posting on someone’s Wall may appear in your mutual friends’ News Feeds. You just broke up with your significant other …  do you want to announce that to the world? However, if you choose to keep some of the most personal things in your life well.. personal, you can enforce that privacy setting here.

Facebook does offer limited privacy in that your recent activity will never be shown about whose profile you view, whose photos you view, whose notes you read, groups and events you decline to join, people you reject as friends and people you remove from your friends list.

• Under Settings -> Privacy Settings, select News Feed and Wall
• Deselect the option of Show Wall posts
• I would highly recommend deselect Change relationship status option under highlights section
• I would also highly recommend under recent activity the option of Add a friend

Facebook News Feed and Wall privacy options

8. Facebook Ads

Ads shown within Facebook recently caused a lot of controversy with the usage of your photos in ads. Facebook came out and countered that these rumors were related to third party applications, and not ads shown by Facebook. If in doubt check out what happens if you happened to use the “Have Sex!” application (warning: clicking on link will take you to this application) and could result in potential embarrassment by such feeds being published on your profile.

Have Sex ! application posting on your Facebook wall

Facebook also said that those ads violated their policies by misusing profile photos and did not give third party applications or ad networks the right to use your name or picture in ads. In either case, if this is allowed in the future, this setting will govern the usage of your information.

• Under Settings -> Privacy Settings ->News Feed and Wall, select Facebook Ads
• In the option under Allow ads on platform pages to show my information to, select No one and Save Changes
• Follow the Set Application security Facebook privacy settings below.

Facebook third party ad privacy settings

9. Set Application security: Every time you participate in one of those Facebook quizzes and adding an application to your profile, you are sharing some very sensitive information with those applications. If you read about the experience of Cheryl Smith who participated in a quiz and then the third party app used her picture to advertise for hot singles.

Applications can advertise with YOUR picture

To modify your Facebook privacy settings for applications, click on Applications under Privacy and then click on Settings which is the second tab.

• If you are using any applications, you won’t be able to completely opt out. If you are not using any Facebook applications, select the Do not share any information about me through the Facebook API option.
• If you are using applications, deselect all options and choose only if any Basic info option. Basic info consists of your birthday, sex, hometown, political views, and when you last updated your profile.

10. Facebook Beacon & Connect: Think about the amount of data Facebook knows about you. It knows who your friends are, what you like, eat, enjoy, you age domographic, your school, your employment history, where you live or lived and so on. All of this gives Facebook the chance to personalize ads. For example, if you reviewed an item or purchased something, a Beacon affiliate can publish that as a feed on your Facebook wall and on your friends walls as well.

Make sure you don't review something inappropriate

To modify your Facebook beacon privacy settings, under Privacy ->Applications -> Settings, scroll down towards the bottom of that page under Facebook Connect Applications.

• Select the option of Don’t allow friends to view my memberships on other websites through Facebook Connect.
• Under Beacon Websites, select the option of Don’t allow Beacon websites to post stories to my profile.

I think I came across one of the best strong password generators on the Internet at Password Chart. Picking a strong password is very important. A strong and secure password should go beyond just a simple number such as passw0rd where you replace the o with a zero(0) or a special character in the end such as password!. However, when you have to go picking numbers, special characters for a strong password of more than 7 characters, it can become hard to remember such a strong password.

For using the password chart, enter any common phrase you might use or known to you. For example, I used the phrase “the ipod rocks“. Now, using this phrase, the password chart generates a chart for you. If you are online, you can enter a password you wish to convert using this chart. You can enter a simple word or words here. For example, I used the word “zune” as a password I wished to convert to generate a strong password. I end up with a strong password of “%^Ed8u63G“. Once you generate a password chart, you can also print it out and use it for generating other strong passwords without the need to access the internet.

Click here to access Password Chart and generate a strong password

Technical Information. How the Password Chart Generator works

1. An MD5 hash of the chart selection phrase is performed and the first 4 bytes of the hash is used as a random number seed to a Mersenne Twister pseudo-random number generator.
2. The password chart is then filled using sequences of 1 to 3 random upper and lower case letters and optionally numbers and punctuation by grabbing successive numbers generated from the Twister. The reason for the random sequence length is to make reversing the substitution cipher a bit harder.
3. The alphanumeric characters in the password is then converted using the chart.

The Enigma was a rotor machine used by the German Military during WW II to encrypt messages they sent to each other. It was invented by German Engineer Arthur Scherbius in 1923. The Enigma Code Machine consisted of a plugboard, three rotors and a reflector which redirected the electrical current. Each letter entered by a keyboard was matched by an encrypted letter by closing an electrical circuit which was reconfigured after each entry.

We need to use secure passwords for our everyday computing. So how about using the Enigma Code Machine to generate secure passwords for us. Dr. Frank Spiess helps us out here with a very good flash Enigma Code Machine.

A brief example: Open the machine window, click on the “Input:” textbox and enter “c” on the keyboard. The plugboard leaves C as C while highlighting the specific wire in red. The electrical current then moves to the rightmost rotor, that is, to its letter A. A is then connected to B. The current enters the middle rotor, that connects G with R. The third (leftmost) rotor maps V to I. In the next step, the reflecor maps B to R. Then the current moves way back along the green wires through the rotors back to the plugboard, where Q leads to Q. As a result, we have the encryption of C to Q. If you now enter “c” again, you see that in this case it yields G! This is because the rightmost rotor moves one step to the left before a letter is entered.

So, click here to access the Flash Enigma Code machine built by Dr.Frank Spiess

In my example of a secure password, I enter a simple plain text of “securityblog”. This plain text is converted to a cipher text by the Enigma Code Machine resulting in a secure password of “BMGNHOIPWRNB”

I admit that there are limitations to using the Enigma Code Machine for generating secure passwords. For starters, you don’t have numbers and special characters as part of your final secure password. This I believe could be improved… but again, this is the limitation of the Enigma Code Machine.

Protecting yourself is very challenging in the hostile environment of the internet. Imagine a global environment where an unscrupulous person from the other side of the planet can probe your computer for weaknesses, and exploit them to gain access to your most sensitive secrets.

They can even use your computer to store data like stolen credit-card numbers or child pornography, or to attack another innocent home user or business from your system.

Here’s Kevin Mitnick’s Top 10 list of steps you should take to protect your information and your computing resources from the bad boys and girls of cyberspace.

#1. Back up everything! You are not invulnerable. Catastrophic data loss can happen to you — one worm or Trojan is all it takes.

#2. Choose passwords that are reasonably hard to guess — don’t just append a few numbers to a no-brainer. Always change default passwords.

#3. Use an antivirus product like AVG or Norton, and set it to update daily.

#4. Update your OS religiously and be vigilant in applying all security patches released by the software manufacturer.

#5. Avoid hacker-bait apps like Internet Explorer and disable automatic scripting on your e-mail client.

#6. Use encryption software like PGP (pretty good privacy) when sending sensitive e-mail. You can also use it to protect your entire hard drive.

#7. Install a spyware detection app — or even several. Programs that can be set to run frequently, like SpyCop, are ideal.

#8. Use a personal firewall. Configure it to prevent other computers, networks and sites from connecting to you, and specify which programs are allowed to connect to the net automatically.

#9. Disable any system services you’re not using, especially apps that could give others remote access to your computer (like Remote Desktop, RealVNC and NetBIOS).

#10. Secure your wireless networks. At home, enable WPA (Wi-Fi protected access) with a password of at least 20 characters. Configure your laptop to connect in Infrastructure mode only, and don’t add networks unless they use WPA.

Hackers are becoming more sophisticated in conjuring up new ways to hijack your system by exploiting technical vulnerabilities or human nature. Don’t become the next victim of unscrupulous cyberspace intruders.