Doug Vitale Tech Blog

Archive for the ‘Useful Applications’ Category

Thwart online snooping with VyprVPN

VyprVPN for Android, Mac OS X, Apple iOS, and Windows revs up your digital privacy.

A virtual private network (VPN) creates a secure network connection over a network you don’t fully trust, such as the Internet. By creating secure tunnels between endpoints, VPNs are a way of disguising (encrypting) your data traffic so that third parties (such as hackers, ISPs, and state-sponsored authorities) cannot see your true source IP address or the content of your online activities.

Many businesses, government agencies, and educational institutions use VPN technology to enable remote access for their users. With VPNs these users can securely connect to their work networks from their homes, airports, hotels, etc. What if you could connect not just to one destination, but to the whole Internet in such a way? After all, in light of the recent flood of revelations in regard to online spying committed by various facets of the American government (and by foreign states as well), all Internet users have a valid reason to increase their level of online privacy. VyprVPN by Golden Frog, a global online service provider, is an easy and highly effective way to do so.

VyprVPN logo
Read the rest of this entry »

Written by Doug Vitale

May 8, 2014 at 9:42 PM

Increase online privacy with RetroShare

In a previous article I described how to significantly increase your online privacy with the Tor service. RetroShare is another option for Internet users who are concerned with staying anonymous online. RetroShare is an application that lets you create private, secure network connections (based on 2048-bit RSA-encrypted SSL) with trusted individuals of your choice (a peer-to-peer network known as “Friend-2-Friend”, or F2F). Unlike some other P2P file sharing services like BitTorrent and Limewire/Frostwire which do not let you selectively share your files with certain users, RetroShare’s F2F functionality allows you to transfer files only with those users to whom you have given your explicit approval.

Once your computer establishes the decentralized F2F connection with your contacts, you can share files, send messages and chat, talk over VoIP, post and read messages in forums, etc. RetroShare not only fully encrypts all communications, it also provides reliable identification and authentication of your trusted contacts so you can be relatively sure that the other users participating in the F2F network are who they claim to be. RetroShare has the potential to be a completely independent social media venue where users’ private data and files are safe from advertisers, marketers, and other entities (i.e., Facebook, Google) looking to harvest personal information for profit, as well as entities engaging in surveillance and censorship. How safe is your online activity using RetroShare? As stated before, it uses SSL tunnels based on RSA 2048-bit encryption. To get an idea of how hard it would be to crack, this YouTube video should explain it.

Using RetroShare

Luckily, RetroShare is available for many different operating systems (Windows, Mac OSX, Linux, etc.). It is built on top of some very reputable and robust software libraries: GNU Privacy Guard/GPGME and OpenSSL.

After you download, install, and launch RetroShare you will first be prompted to create your RetroShare identity.

RetroShare create new identity

Then you will see the main graphical user interface (GUI) as shown below.

Read the rest of this entry »

Written by Doug Vitale

July 29, 2013 at 2:49 PM

Tor anonymity: how it works and how to use it

The Onion Router (TOR) network is intended to help protect the privacy of Internet users and promote greater freedom of expression online. Tor is a system of volunteer servers that acts as a buffer between Internet users and the resources they connect to. If you connect as a Tor client, your online access is channeled through this buffer before it reaches the general Internet. To understand clearly how Tor functions, you must first have a good idea of what proxy servers are, and of the role they play during network transmissions.

A proxy server acts as a middleman between a client computer and the target server or resource it is accessing. As such, proxies can be configured to log user activity and restrict Internet access; for example, by blocking certain websites or protocols. However, proxies can also help protect the client user’s privacy because the target server is only aware that it is communicating with the proxy, not with the client. For example, if you connect to a web proxy and then load a website, the site is only aware that it is being accessed by the proxy and it has no knowledge of your computer and IP address. The illustration below depicts network data flow when a proxy is deployed. Resources within the Internet icon (such as web servers) are only aware of the proxy server, not of the three clients behind it.

Internet access through a proxy server

The “Internet” only knows about the proxy, not the three clients

Now what if instead of using a single proxy server, you could connect to a network of them for increased bandwidth and availability? And what if you could encrypt your communication sessions for increased confidentiality? Using Tor, you can.

Read the rest of this entry »

Written by Doug Vitale

May 29, 2012 at 11:06 PM

BitTorrent: How it works and how to use it

BitTorrent is not an application you install; it is a network protocol that facilitates decentralized (or distributed) file sharing over the Internet. In this way it is similar to the functionality provided by traditional peer-to-peer (P2P) applications like Napster in the 1990’s, Kazaa, and Limewire. However, BitTorrent differs fundamentally from these older P2P sharing applications because it introduces components such as BitTorrent websites, torrents, trackers, seeders, and leeches (definitions below).

BitTorrent is also unique in how it efficiently uses bandwidth to achieve high data transfer rates. If the file you want is available from multiple hosts, BitTorrent establishes connections with them and downloads chunks of the file simultaneously. Therefore you trade one large, multimegabyte or multigigabyte download for several individual downloads, each of which is handling a much smaller sized data transfer. Additionally BitTorrent allows you to share these parts of a file even if the file itself isn’t fully downloaded on your end.
Typical BitTorrent network with data flow paths shown

Image source: Threestory Studio

Going further, the BitTorrent protocol is designed to ensure that its users share (upload) as much as they take (download). This feature is known as tit-for-tat and is meant to prevent users from downloading without uploading. In fact, BitTorrent tries to reward its generous users like so: the more files you share with others, the faster your downloads are. Obviously the number of users sharing the file you want will also play a role in determining download speed.

Read the rest of this entry »

Written by Doug Vitale

February 1, 2012 at 4:20 PM

Darik’s Boot and Nuke

A situation may arise when you want to completely wipe the data from a hard drive. You may be selling or giving someone your old drive, or perhaps you just want to dispose of one in the trash. Other times your Windows installation could be crawling with malware and you want to completely erase it. Maybe you suspect your drive will soon be forcibly confiscated. In these cases you should obviously be concerned about other individuals accessing your files, even the files that you have “deleted”. For times likes these, Ben Rothke makes the case for secure data destruction in his article ‘Why Information Must Be Destroyed’.

Destroyed hard drive

When you want to achieve total data destruction on a drive, a tool like Darik’s Boot and Nuke (DBAN) can save the day. Even though physical destruction is the safest bet, utilities like DBAN are the next best choice. According to Wikipedia, DBAN “is designed to securely erase a hard disk until data is permanently removed and no longer recoverable, which is achieved by overwriting the data with pseudorandom numbers generated by Mersenne twister or ISAAC”.

Version 2.2.8 was released in November 2013. DBAN software is available from SourceForge.

Read the rest of this entry »

Written by Doug Vitale

January 26, 2012 at 3:24 PM

Reset Windows passwords with Offline NT Password & Registry Editor

The Offline NT Password & Registry Editor is a small Linux boot disk that you can use to change or delete Windows passwords outside of the Windows OS environment for local accounts. This can be useful if you forget your Windows password or the password belonging to the Administrator account. This utility can enable you to change or delete passwords, but it cannot tell you what the password for an account actually is. As such it is not appropriate to label Offline NT Password & Registry Editor as a ‘password recovery tool’; it’s a password editor, just like the name says.

It is compatible with Windows 3.x, Windows 95/98/ME, Windows NT, Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows 7, and Windows Server 2008.

Please note that the Offline NT Password & Registry Editor (‘Offline’) home page states: “If password is reset on users that have EFS encrypted files, and the system is XP or newer, all encrypted files for that user will be UNREADABLE and cannot be recovered unless you remember the old password again“.

Also note that Offline cannot be used to change or reset Active Directory passwords.

Offline’s versioning is done using release dates. The version used in this tutorial is 110511 (for 11 May 2011).

How to use it

First, download the installation ‘cd******.zip’ file from the website above and extract it locally. Burn the resulting .iso file to a CD-ROM. If you plan to boot to a USB drive, download the ‘usb********.zip’ file and extract its contents to the drive.

Second, insert the CD or USB drive into the computer and reboot it. Before the Windows OS loads (while the manufacturer’s screen is briefly displayed), hit the appropriate key (usually one of the twelve ‘F’ keys) to enter the boot device manager where you can specify a device to boot to (overriding the default device, which is almost always C:\ on the internal hard drive).

Your computer will load the contents of the Offline CD or USB drive. When it is finished you will be prompted as follows.

Read the rest of this entry »

How Hashing Works: DigitalVolcano Hash Tool

A hashing algorithm is a one way (non-reversible) function that takes an input (such as a file or message) and produces a fixed-length string of characters (called a hash). This string is not randomly generated; the hashing algorithm looks at the low level arrangement of data bits in the input. Hashing algorithms such as MD5 and SHA-1/SHA-2 verify the integrity of files. If a sender produces a hash of a file and sends the file and hash to a recipient, and the recipient recalculates the hash and gets the same value, both parties can be assured that the file or message was not altered while in transit.

DigitalVolcano’s Hash Tool is a free hash program that you can use to run hashing algorithms on various files.

DigitalVolcano Hash Tool

The DigitalVolcano Hash Tool v1.1 user interface

Read the rest of this entry »

Written by Doug Vitale

November 23, 2011 at 10:15 AM

%d bloggers like this: