Geek News Central is the technical site for Geeks. We Spin tech for the common man. With a Family of Tech Shows and Content.



OWC Power2U USB in an AC Wall Outlet

Posted by Andrew at 8:40 AM on February 3, 2012

OWC Power2U USB socketOWC are more usually known for their line of Mac-compatible SSDs but unsurprisingly, they do have other products. Andy finds out more from Grant.

The unsightly profusion of mobile phone, tablet and other gadget chargers is a bane of modern life. OWC have a tidy and green solution in the shape of a standard power socket fitted with smart USB charging points which don’t draw power when not in use. It’s approved by UL, too, so it’s home safe. The Power2U is available now for $27.99. OWC – please do a UK version too.

Moving on, iPads are an easy target for thieves and corporate devices doubly so. OWC’s iPad GripStand Station securely stores, recharges and syncs up to 8 iPads at once, even when the iPads are fitted with a GripStand. The security bar and padlock make petty theft much more difficult. Available now from $379, which I gather is a somewhat of a bargain.

Interview by Andy McCaskey of SDR News and RV News Net.

Sponsored by:
GoDaddy.com get 25% off 1 year 4GH Web Hosting use Promo Code CES2
GoToMyPC access your computer Free for 30 Days!
Callisto.fm Real Time Media Analytics Beta Signup

PlayPlay

If You Live In or Visit Hawaii Your Rights are Being Threatened

Posted by KL Tech Muse at 7:12 PM on January 26, 2012

  The Bill of Rights The right of the people to be secure in their persons, houses, papers and effects, against unreasonable searches and seizures, shall not be violated, and no warrants shall issue, but upon probable cause, supported by oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized”- 4th Amendment, Bill of Rights, U.S. Constitution

What would you say if your state decided that your ISP had to keep records of all the Web sites you went too? That they had to keep records of both Internet protocol address and domain names of all sites that you visited and they had to keep them for a minimum of two years. That is what is being proposed in the Hawaiian State Legislation under H.B. 2288, which states that Internet destination history information and the subscriber’s information, such as name and address must be saved for no less than two years. I know what some of you are saying I don’t care if the government knows what Web sites I visit I have nothing to hide, or if you aren’t doing anything wrong what’s the problem.

Do you currently belong to any political or social organization like the Tea Party  and do you visit supporting Web sites a lot.  How would you feel if the government started investigating the Tea Party and started looking for information on its members. Now how do you feel about the legislation. Let’s take this to the real world, what if the government required the local retail stores to keep a record of every book you bought, every magazine article you read, the talk radio you listen too, the clubs you joined, the people you associated with, now how do you feel. If you are like me you are saying to yourself that’s none of the government business, well this legislation does exactly that only in the virtual world.

Rep. John Mizuno of Oahu is a lead sponsor of the bill and a similar bill is being introduced in the Hawaii Senate. The bills are being introduced at the behest of Representative Kimberly Marcos Pine, who is in the middle of a dispute with a web designer Eric Ryan, who launched KymPineLsACrook.com and who says she owes him money. Her email was also hacked last summer, at the same time an article was written in the Hawaii Reporter about the dispute.  Because of these incidents Rep Pine has advocated tougher cyber laws. Those who support the legislation say that this type of law is necessary to “to protect people of Hawaii from these attacks and give prosecutors the tools to ensure justice is served for victims.” Unfortunately for the supporters of this bill, that is not how the law works in the United States, you can’t gather information on a large group of people in hopes that you may capture a few bad apples.

If the constitutionality of the bill is not enough there is also the question of what the Internet Provider can do with the information while they hold it. The bill says nothing about how the data should be stored or if it needs to be encrypted. There is no prohibition against the Internet Companies selling the information to anyone including advertiser or insurance agencies. So if you don’t care about the government having the information, how about your insurance company. The police aren’t even required to get a court order to view the information of anyone who uses a computer in Hawaii. This legislation would not only apply to Hawaiian residents but it would also apply to the 6 million tourist who visit the state each year. Which mean coffee shops, hotels, bookstore or anyone else with a public wi-fi would have sweeping requirements and cost put upon them.

We all want the bad guy to be caught and stopped, but not if it means giving up our rights and freedoms. Although SOPA and PIPA were stopped last week in the U.S. Congress, the fight over our rights and freedoms on the Internet is on going, it has simply moved to state legislation, we all need to remain vigilant.

G Data Mobile Security for Android

Posted by Andrew at 5:41 PM on January 16, 2012

G Data’s Mobile Security provides anti-virus and security monitoring for Android smartphones and tablets. Is this really necessary, you might ask, but I think after some of the recent malware removals by Google, there’s sufficient evidence that Android will increasingly be a target for malware and virus writers. Such is life.

Mobile Security provides three main functions, on-demand scans, blacklist control and authorisation checks for installed apps, all controlled from a main home screen.

G Data Mobile Security Main Screen

Tapping on any of the four areas will show the next screen for that function. Here’s the on-demand virus scanning – no surprises there – but Mobile Security also scans apps as they are installed from the Android Market (or elsewhere presumably) which gives additional protection against malicious software.

G Data Mobile Security Virus Scanning

The Permissions area shows a set of controlled features such as calls and internet access, and by selecting a particular feature Mobile Security shows the apps that have permissions for that feature. I thought that you might be able to then select an application and revoke its permissions to, say, access the internet, but the only option is to uninstall the app.

G Data Mobile Security Permissions    G Data Mobile Detailed Security Permissions

A settings screen is accessible from the menu key which provides greater control over the behaviour of Mobile Security’s activities. Usual stuff about scan intervals and automatic scans but all good stuff.

G Data Mobile Security Settings

The Logs area shows what Mobile Security has been doing and Update simply checks that the virus signatures are current and up-to-date. Nothing unexpected here.

G Data Mobile Security Logs

Unfortunately, I didn’t have any malware to hand so I wasn’t able to test out Mobile Security’s detection and disinfecting abilities but I would imagine that G Data’s got that covered.

It’s a free download from the Android Market to try it out, but it’s £9.99 per year to get updates for new malware and viruses. Alternatively, purchases of other G Data security products such as  G Data AntiVirus include a Mobile Security licence as part of the package.

The licence for this review was provided free of charge by G Data. Thanks.

 

DiskCrypt

Posted by KL Tech Muse at 6:14 PM on January 13, 2012

DiskCryptAmong the thousand of items at CES 2012 that have the bling and the pop, often the ones that have a quieter presence may end up being just as important. In this category is a product called DiskCrypt by Singapore based ST Electronics. What is DiskCrypt?The DiskCrypt is a hardware based encryption solution. It turns any 1.8” micro-SATA device into a removable and fully encrypt storage. The enclosure is the size of a 2.5” drive that fits into most of today’s notebooks.

If you have a brand new machine (with no OS installed) you would install DiskCrypt like you would a normal hard drive and then boot-up from it. Once authentication is done, DiskCrypt will than show up as a normal drive. You can then install your OS, Windows or Linux as you would normally. DiskCrypt does not work on a Mac. If you have an existing drive, you have to remove the current drive first. It goes without saying that before you do this you want to backup all your data. Then install DiskCrypt and go through the authentication process. Then using a cloning tool such as Aronis and a USB to SATA Bridge you reinstall the OS and Data. Unlike most software solutions DiskCrypt encrypts every sector, including temp files, and the boot sector without a lost in performance. It uses Nist approved AES encryption algorithm. The cryptographic module in use is FIPS 140-2 level 1 certified. DiskCrypt offers key strength of 128 and 225 bits. With the addition of the optional DigSafe KeyCrypt cryptographic token two factor authentication is available. There is a Master password which is provided to the administrator, who can use that to recover a lost user password. If the Master password is lost, your out of luck, there is no way to recover that. This also means that a good master password that is kept in a secure location is the key. If a password has to be changed that can be done at the time of authentication without any lost of data.

The DiskCrypt enclosure is $450.00. At that price this is clearly not a product that is being sold to consumers. If you are a business small or large and your data is being carried into the field on notebooks that are easily lost then $450 may seem like a bargain compared to the cost of letting that data fall into the wrong hands.

SurfEasy On-line Privacy Debuts at CES

Posted by Andrew at 1:44 AM on January 6, 2012

Canadian firm SurfEasy will debut their eponymous USB key-based private Internet browser at CES, Las Vegas, next week. The portable USB key launches its own web browser which uses strong encryption to keep your surfing habits secret and holds all your personal information such as bookmarks, history and web passwords on the password-protected key itself. Nothing is left behind on the computer itself.

SurfEasy Secure Internet

When you stop and think about it, we use many different networks and computers to access our online lives. Whether it’s connecting from the office or using a Wi-Fi hotspot, we’re providing a lot of personal information to computers, networks and websites that are not designed with our personal privacy in mind,” said Chris Houston, founder and CEO of SurfEasy Inc. “SurfEasy lets people take control of protecting their online privacy and security by simply plugging in a USB key.

One of the biggest potential benefits is when using unsecured WiFi in places like coffee shops. As SurfEasy creates an encrypted tunnel from the SurfEasy USB key across the Internet, no-one can see any detail about your browsing. All they can see is the encrypted data and the volume of data. SurfEasy encrypts the web traffic using SSL and passes the traffic through its own servers, stripping the client IP from the data stream.  The proxy network is hosted in Canada and the US, with other international locations to come soon.

As the data stream passes through SurfEasy’s servers, SurfEasy publish a Customer Bill of Rights which is upfront about what you can expect from the company in terms of keeping your activities secret. Basically, unless you come to the attention of the legal authorities, no usage data is held.

The SurfEasy browser is powered by Mozilla and is compatible with Microsoft Windows XP, Vista and 7. Apple users needs to be on Mac OS X 10.5 or later. The SurfEasy USB key costs $60 and this includes 2 GB per month of encrypted traffic through the SurfEasy network. Additional data costs $5 per month for 25 GB and $10 for 75 GB. Product delivery is expected in February.

I can see this being very handy for backpackers and other travellers who have to use Internet cafes while travelling and are rightly concerned about security. Plug-in the SurfEasy USB key to a public computer and you’re instantly secure wherever you are.

The War in Cyber Space

Posted by KL Tech Muse at 6:51 PM on November 6, 2011
Cyber Security

Symantec's report on a recent wave of cyberattacks includes the geographic breakdown of computers used in the attacks.

What do these four articles have in common.

They are all signs that cyber espionage is growing as a threat in today’s increasingly interconnected world. Not only for the U.S but for other countries and groups around the world. Many believe that most attacks are coming out of China and Russia. Countries like the U.S., Israel also use cyber espionage when it is to their advantage. The use of infected machines by hackers often makes it difficult to know where the attacks actually originate from.  Attacks maybe either done by nation-states, private groups or individuals and telling the difference is very difficult. Some hackers may try to attack defense targets, but most target businesses and involve attempts to steal intellectual property, including design documents, formulas and various manufacturing processes. How many attacks occur yearly is unknown, since many companies do not report such attacks publicly.

The critical importance of the fight against cyber espionage was underscored by retired four star Marine Corps general James Cartwright, in an interview with Reuters. He believes that we should be more public when it comes what general deterrents we have and are willing to use. He said “You can’t have something that’s a secret be a deterrent. Because if you don’t know it’s there, it doesn’t scare you. Many experts believe that a deterrents policy needs to be created to indicate the threat of possible action without being too specific. For now U.S officials are silent on the type of deterrents that the US has, however it is assumed that it has both defensive and offense ones it can use.

The Obama administration is currently crafting rules of engagement in cyber space after releasing its general policy earlier this year. Many see cyber space as the fifth pillar of defense, which had been land, sea, air and space. The one thing that is clear cyber espionage is only going to increase in sophistication and intensity as cloud computing becomes more popular.

The Weakest Link in Security is the Human Link

Posted by KL Tech Muse at 7:14 PM on October 31, 2011

SecurityStudies have shown again and again that the weakest link in securing a customer’s information for a business is the customer service representative who deals directly with the customers. I worked as customer service representative for almost 20 years and trying pleasing the customer, while maintaining security is never easy. The customer is always right is a mantra that is drummed into you from the beginning of your employment. So when a customer calls in and has a reasonable story and it is late on a Friday afternoon, it’s much easier to provide the information they ask for than to deny it. There is nothing but your personal integrity and maybe the fear of being fired holding you back. It is definitely not loyalty to the company, when you know that the company is more than willing to replace you at anytime for any reason and the pay isn’t that good. Also you are always under pressure to complete a certain number of calls during your work day.

Social Hackers know this and use it to their advantage to get the information they are looking for. This is called the Schmooze button by many in the security business. The same person who gets you to buy a TV when you go to a store just to buy some batteries, that’s the same guy who would makes a real good hacker. He knows exactly what to say and how to say it to get you to buy the product or provide the information he is looking for. Many companies spend a lot of money on security, building up firewalls and installing advance systems. Hackers know this, they also know that they can often get around the best security system, using social engineering. The answer than is not to spend more money on advance security systems, the best answer is to continually train the customer service representatives in security and it’s importance. Many companies are now increasing the number of question, they ask a customer who request information. However there is a thin line between maintaining security and irritating the customer, companies have to tread that line. So when you call your bank or credit company because you’ve lost your credit card and they start asking you a lot of questions don’t get mad at them instead thank them for protecting your information from hackers.

Search Data and Browsing History Used As Evidence

Posted by Andrew at 12:13 AM on October 20, 2011

Google Logo
The murder trial of Jo Yeates is front page news throughout the UK – a neighbour Vincent Tabak is accused of killing her. At the moment, the prosecution is presenting its case and a couple of interesting things have emerged as evidence.

In particular, the prosecution has alleged that the defendant:

  • looked at Wikipedia for the definitions of murder and manslaughter.
  • searched for the maximum penalty for manslaughter, i.e. how many years in jail.
  • looked up definitions for sexual assault and sexual conduct.
  • searched maps showing the area where the body was later found.
  • searched on CCTV cameras in street where both the defendent and victim lived.
  • use Google StreetView to view the same area.
  • researched criminal forensics, fingerprinting and DNA evidence.
  • read news stories on the investigation into the disappearance  of the victim.

Of course, it will be up to the jury to decide whether these are good indicators of guilt, but regardless it’s clear that if someone is accused of a crime then there’s a pretty thorough examination of one’s computers and on-line behaviour. Obviously this case is about a very serious crime but it’s almost a gift to the prosecution when put together like this: can you think of any good reason to access this material at the time of the disappearance? However, this is circumstantial evidence and needs to be weighed as such.

On a related note, Google has announced that if you are signed-in to Google when you search, you will automatically use https://www.google.com/, the secure version of Google Search. While this will prevent casual snooping on your search, Google will be keeping hold of your search information so that it can better serve you adverts. And how long does Google keep the search information? Indefinitely or until you remove it. So while on the face of it encrypted search is a good thing, it comes at the price of Google knowing yet more about you.

I suspect that in the current murder trial, all the computer forensics team had to do was look back through the defendant’s browser history. Easy if there’s only one computer, but more difficult if the person has a home computer, work laptop, smartphone and so on. If you’re tied into Google everywhere, all they’ll have to do is subpoena information from Google and get your search data in one tidy little bundle. Nice.

Virus Infects US Drones

Posted by Andrew at 8:39 AM on October 8, 2011

Predator DroneWired is reporting that a virus has infected the flight systems controlling the Predator and Reaper drone aircraft in the Middle East. The systems have been infected for about two weeks and it appears to be a keylogger-type of virus. Further, the virus has resisted attempts to disinfect the system but the military think it’s benign.

You can read the full article yourself, but as an IT professional I read it with utter horror and dismay. Here we have a (potentially) armed aircraft apparently still operating with an unknown virus in its systems. Does this ring alarm bells for anyone else?

I work in a public sector organisation and our approach to a PC with a virus infection is to pull the plug on the infected equipment and disconnect it from the network until we are able to clean the PC, regardless of whether we think its benign or otherwise. We’re concerned that data might be wiped out. You’d think that the military might have concerns about people being wiped out by a malfunctioning drone but apparently not.

And then there’s the question of how the system came to be infected. Again there seems to be a remarkable lack of knowledge. No doubt we’ll find that the USB ports were unlocked, there was no antivirus software and anybody could plug in a memory stick at will.

Looks like there’s a market opportunity for an AV company…

Democracy, Security and Social Media

Posted by KL Tech Muse at 9:45 AM on August 16, 2011

Egyptian Revolution In the last six months we have cheered the use of Twitter and Facebook during the Egyptian revolution. How they were both used to get and spread information about what was happening and where, allowing the opposition to organize. When the Egyptian government tried to shut them down, the western press and government accused it of denying the Egyptians their rights. At the time few questioned how the west would react under similar circumstances. Lately the answer to this question is started to become clearer and the picture in the mirror is a bit ugly.

Unfortunately last week London and several other cities were rocked by violence. Riots broke out in several parts of the city, according to multiple stories Blackberries phones along with Twitter and Facebook were used to coordinate the rioters. Blackberries were used because messages are encrypted and even RIM doesn’t have the key. Blackberries are also cheap compared to iPhones or Android phones. Prime Minister David Cameron, suggested that social media including Twitter and Facebook maybe limited during riots. Leaving aside technical issues of trying to do this, which there are many, is this the right thing to do and does it cause more problems than it solves. Now you could argue as Prime Minister Cameron did that the rioters were a bunch of thugs and hoodlums and you don’t have the right to use technology to commit criminal acts. However isn’t this what governments like China and Syria label opposition and democracy protestors. If this policy is implemented in Britain, then what credibility does it have to protest a similar action in China, couldn’t the Chinese say we’re just following your lead. Not to mention the fact that if you limit social media (what ever that means) during unrest you are not only punishing the guilty but also the innocent. In fact those who are less tech savvy are more likely to be hurt. Tech savvy users can usually can find their way around government’s attempt to block services using various methods including Tor or VPN services.

Clearly blocking social media in a whole city or even a neighborhood is difficult both technically and socially. However what if you just want to block a single building, like a train station or a subway, well Bart, the San Francisco rapid transit system found a way, they simply shut down the cellular services in the subways. They did this when they heard rumors there would be a protest against the shooting of an unarmed passenger by a Bart policeman They simply shut down the system base station, disabling the wireless network. They did this without informing the various wireless carriers in the area or making any public announcements. So for about three hours there was no cellular service. Commuters couldn’t make calls to home, or work or even 911. Nor could you surf the web or doing any work that was online. The FCC is now investigating the shut down as a possible violation of the Communication Act of 1934, which bans radio or cellphone jamming.

Clearly social media has become a thorn in the side of both democratic and undemocratic governments. The issues are not only technical but also political. The ongoing battle between activist and various governments will continue well into the future as they continually leap-frog each other.