Showing posts with label security. Show all posts
Showing posts with label security. Show all posts

Thursday, July 23, 2009

Self Destructing E-Mail with Vanish Firefox Plugin

Computing and communicating through the Web makes it virtually impossible to leave the past behind. College Facebook posts or pictures can resurface during a job interview; a lost or stolen laptop can expose personal photos or messages; or a legal investigation can subpoena the entire contents of a home or work computer, uncovering incriminating or just embarrassing details from the past.

Vanish is a research system designed to give users control over the lifetime of personal data stored on the web or in the cloud. Specifically, all copies of Vanish encrypted data — even archived or cached copies — will become permanently unreadable at a specific time, without any action on the part of the user or any third party or centralized service.



For example, using the Firefox Vanish plugin, a user can create an email, a Google Doc document, a Facebook message, or a blog comment — specifying that the document or message should "vanish" in 8 hours. Before that 8-hour timeout expires, anyone who has access to the data can read it; however after that timer expires, nobody can read that web content — not the user, not Google, not Facebook, not a hacker who breaks into the cloud service, and not even someone who obtains a warrant for that data. That data — regardless of where stored or archived prior to the timeout — simply self-destructs and becomes permanently unreadable.

The technical paper, which will appear at the 18th USENIX Security Symposium in August, describes the concepts behind Vanish in detail. Briefly, as mentioned above, the user never knows the encryption key. This means that there is no risk of the user exposing that key at some point in the future, perhaps through coercion, court order, or compromise. So what is done with the key?

Vanish leverages an unusual storage media in a novel way: namely, global-scale peer-to-peer networks. Vanish creates a secret key to encrypt a user's data item (such as an email), breaks the key into many pieces and then sprinkles the pieces across the P2P network. As machines constantly join and leave the P2P network, the pieces of the key gradually disappear. By the time the hacker or someone with a subpoena actually tries to obtain access to the message, the pieces of the key will have permanently disappeared.

The Vanish prototype uses the Vuze Bittorrent Distributed Hash Table as the underlying P2P network. It supports data timeouts of 8--9 hours by default, though longer timeouts are possible.

Wednesday, May 27, 2009

Rovio Wi-Fi Home Security Robot

Ever wanted to be in two places at once? Now you can.

WowWee Rovio Wi-Fi Enabled WebCam Robot is a groundbreaking new Wi-Fi enabled mobile webcam that lets you view and interact with its environment through streaming video and audio, wherever you are! It is a new challenger of the remote control Spykee bot that you have seen on my blog earlier.



The Rovio has an impressive list of features that makes it useful as a home security robot, telepresence device or a just for fun toy gadget:
  • Easily remote control from any web-enabled device: PC or Mac, cell phone, smartphone, PDA or even your video game console.

  • Head-mounted moveable camera and wide range of vision

  • Indoor GPS

  • MPEG4 video

  • Self-docking capabilities for auto recharge

  • Built-in LED headlight

  • Wi-Fi connectivity (802.11b and 802.11g)
The Internet of Things is happening as innovations like remote control wifi robots are becoming connected devices. Roveo is a pioneer and it could probably be improved but it shows the possibilities and is fun to play with.

Thursday, October 16, 2008

Spykee Robot - Remote Control Spy Robot with Wifi Skype Video

Spykee, the spy robot is an innovative home surveillance solution and an incredible fun and cool gadget all in one. It is Skype compatible and have 3 different models.

Spykee Spy is the WiFi robot you build yourself! He can be controlled remotely from anywhere in the world using a computer and Internet connection. Spykee moves, watches, hears, speaks and monitors (whatever you want). He is available for preorder on Amazon.com for less than $300. He is a great toy but also an universal home surveillance security guard robot too.

Discover all his other functions:
  • Photo/Video: Spykee takes pictures and records video.
  • Monitoring and Video Surveillance: He monitors and protects your room from intruders with his video surveillance function! Spykee detects movement and sends you a picture of the intruder by e-mail.
  • VoIP Phone: Spykee lets you make free calls on the Internet with VoIP Phone function!
  • MP3 Player: Spykee can play mp3 music. It is made for iPod through Erector.
  • Self-recharging: When Spykee gets low on power it will find its power station and automatically dock with it to recharge.
The robot is equipped with:
  • Webcam
  • Microphone
  • Speaker
  • Flash lightning and lights
  • Rubber tracks
  • Comes with recharging dock
The Spykee robotic sentry is the most fun wireless broadband gadget you can get today. I can't wait to get mine! I hope that the Spykee remote control iPhone app will soon make it to the Apple iPhone App Store. Check out the Spykee page for more information.

Thursday, January 24, 2008

The Storm Worm and the Rise of P2P Malware

It is estimated that several million PCs have been infected by the Storm Worm. It represents a new generation worm/botnet. Although it's most commonly called a worm, Storm is much more: a worm, a Trojan horse and a bot all rolled into one. Storm has been around for a year, and the antivirus companies are pretty much powerless to do anything about it. Why?


The Storm worm first appeared at early 2007 in e-mail attachments with the subject line: "230 dead as storm batters Europe." Those who opened it became infected, their computers joining an ever-growing botnet of zombie computers.

There is no central "command-and-control point" in the Storm botnet that can be shut down. The infected windows host computers use encrypted communication over a modified version of the eDonkey/Overnet peer-to-peer protocol. The name and location of the remote servers which control the botnet are hidden behind a constantly changing DNS technique called ‘fast flux’, making it difficult to find and stop them.

We simply don't know how to stop Storm, except to find the people controlling it and arrest them. The Storm botnet uses the power of P2P networking to protect itself.

The Starfish and the Spider: The Unstoppable Power of Leaderless Organizations explains this nicely. Although a starfish and a spider have similar shapes, their internal structure is dramatically different—a decapitated spider inevitably dies, while a starfish can regenerate itself from a single amputated leg. In the same way, decentralized organizations, like the Storm botnet are made up of many smaller units capable of operating, growing and multiplying independently of each other, making it very difficult for a rival force to control or defeat them.

The Storm botnet has been used for spamming, distributed denial-of-service attacks, and other malicious activities including phishing attacks targeting banking European banks. It appears that portions of the Storm botnet and its variants were for sale. The controllers of the Storm seems to lease out portions of the network for misuse.

The Storm represents serious security threat for internet users but it is only the tip of the iceberg. It has started a new wave of innovation by hackers. More advanced P2P malware like Nugache is on its way. Are we prepared?

(To remove the Storm Worm from a Microsoft Windows computer use the Malicious Software Removal Tool as described in the link.)

Wednesday, June 27, 2007

Do-It-Yourself Home Security with a Wireless Network Camera

For $300 you can build a remote controlled surveillance system to monitor your home via the internet.

Cell phones and PDAs are also supported by the new plug-and-play Panasonic BL-C131A pan/tilt wireless network camera. With the built-in motion detector and microphone, the camera can be set to notify you by email when someone enters your home. The 1 Lux CMOS sensor enables good image quality and 30 frames per sec MPEG-4 video even in low light conditions. Although D-Link, Linksys and others also offer similar devices the features of the Panasonic Network Camera Wireless 802.11 justifies its positive reviews on Amazon.com.


Remote home surveillance is yet another useful home automation application that is possible thanks to the wireless broadband internet!

Wednesday, February 28, 2007

Who do you trust on the Internet

Fighting automated spam (e-mail, blog comments and even web search) is difficult.

Internet services can use the Wisdom of Crowds to fight spamming.
Google PageRanks, WikiPedia, Amazon reviews, Ebay and Digg all
make collective trust measurable and quantifiable.

These Trust Services can be manipulated. So they are manipulated by spammers.

The conclusion? Trust, but Verify