First off all, download the plugin from here and extract the content to your root of your UltraVNC folder (defaulted to “C:\Program Files\UltraVNC”). Note: extract to the root of the folder and not the plugin folder (that’s just a container).

Server Configuration
Now on your UltraVNC Server and you should see MSRC4Plugin in the DSM DSM plugin drop down box.

Check Use and hit the Config button.A MSRC4 Plugin Configuration window will pop up.

You will notice that there aren’t any encryption plugin keys present(naturally since we haven’t created any) so make your first key. Select the default 128 bit hit Gen Key.The configuration tool will close after generating the key and this key will be used from now on on every client computer to allow you to view your server running on that specific key-based encryption. You will notice a new file in your UltraVNC installation folder called rc4.key.

Important: Make sure you bring along this key file (rc4.key) along with your UltraVNC or the client will not be able to interact or see the server.

Client Configuration
Copy this rc4.key to your UltraVNC client’s root directory as with the steps in the Server. When you launch your UltraVNC client, check the box called “Use DSMPlugin” and enter your server’s IP address. Click on connect, enter your password.Done!

Therefore, I’m here to write some common security tips to increase the safety of your online transactions and reduce the risk of your online account being hacked:

• Avoid phishing - Always trust only yourself. It’s not too hard to type the address of online banking site on the address bar. Please DO NOT access online banking site via the link in your email or some untrusted sources. Phishing is meant to be avoided at all cost.
• Equipt with security tools – Install at least an Antivirus, Anti-spyware and Firewall into your machine to protect your PC from the invasion of malware/virus/attack.
• Update regularly - Keep your antivirus and anti-spyware updated with the latest definitions, and do not ignore Windows Security update. You would think you’re probably not affected by the update, but it’s better to be safe than sorry.
• Password tips - While it’s OKAY to use your birthdate or your favourite artist name as your password in some discussion forums, a strong password is definitely needed if the site/application is critical:
• DO NOT use the same password in ALL your online accounts. If you do and one of your accounts got hacked, hacker will be able to access all your other accounts.
• Try to avoid using dictionary words like “prettygirl”, “imagination” etc or any other stuff that’s easy to guess (like your birth date, your car plate number)
• Password is case sensitive, choosing passwords that are composed by different case will add more strength to the security (for example, LeEtLe_KiD).
• DO NOT disclose your password to anyone, even if the person claimed he/she is working for the bank or is the site admin.
• If you’ve too many passwords to remember, use a reliable password safe like KeePass.
• Common Sense - practice your common sense. Sometimes it’s difficult to tell what goes wrong with the site, but once you think something is wrong, quit it and seek for experts consultation. Other than that, please do often read some online articles concerning electronic security to improve your awareness regarding this matter.

Feel free to comment on my list (constructive criticisms are welcome) or add in something here as I’ve missed some important stuff. Thanks for reading!

Original article here.

Because of the following reasons, I can’t have the same universal login/password for all my online accounts:-

• Difference in policies, for example, Citibank Malaysia has a very unique requirement that login/password cannot have more than two consecutive characters or numbers

• Security reason – if one of my password information is stolen, the thief will be able to access all my webmails, banking site etc…now that’s serious

It is indeed a pain in the ass to remember each and every of them, if I’ve such a good memory, I would utilize it somewhere else :) I had been looking for a good password manager but most of them are not really what I need (for example, Firefox password manager is too simple for me), until I found KeePass (listen, it’s KeePass, not KeepAss)

KeePass is a free/open-source password manager or safe which helps you to manage your passwords in a secure way. You can put all your passwords in one database, which is locked with one master key or a key-disk. So you only have to remember one single master password or insert the key-disk to unlock the whole database. The databases are encrypted using the best and most secure encryption algorithms currently known (AES and Twofish) (paragraph quoted from KeePass main site).

There are plenty more for you to try out and I’m not going to explain each of them. Experience it instead!

Link: http://keepass.sourceforge.net/

Below are some of the screenshots I’ve captured from this open-source baby:

Figure 1: Connecting to Tor Networks

Well then you if you fall into the aforementioned category then Torpark is the browser for you. Based on a mod version of Firefox, Torpark was created by a Group calling itself Hacktivismo (the reincarnation of the renowned Texas-ased hacker organization called Cult Of the Dead Cow)and is touted to protect your privacy from governments intelligence service and data theives. Torpark uses its own network (Tor network) of net routers and encryption to anonymise the traffic and also regularly changes the net address that someone appears to be browsing from. It’s also stand alone installess but weighs in at 9.3Mb.

Figure 2: Security menu from the right click mouse button.

Figure 3: Torpark in action

download from here.

1. Download TrueCrypt, install and launch.

2. Select “Create Volume” which will launch a walkthrough wizard. Choose “Create a Standard TrueCrypt Volume” and select Next. Hit the “Select File” (it really should be called “Create File” actually) button and navigate to a location to create your virtual encrypted drive file – which is really a file that acts like an encrypted folder. Type a name for it. I’ve created it in “C:\Documents and Settings\xxx\My Documents\stuff.ben”. try to pick a non-important filename (naming it private or encrypted will only make people more curious). your file can have any or no extension (i made mine *.ben). Hit Next.

3. Choose an encryption algorithm from the dropdown box. Next. Choose the size of the virtual encrypted drive file. You have to comit to a size (realize that it’s non-growable and regardless of how many files you throw inside, it will always show that size.Next.

4. Choose a password. If you don’t choose a badass 20-in-length alphanumeric password, TrueCrypt will complain, but you can choose to accept your wussy password as well :P.

5. Format the virtual encrypted drive file. (Don’t worry, you’re not formatting your hard drive but preparing the virtual encrypted drive file.) This is where the coolness factor comes in, TrueCrypt gathers random information from your system like the location of your mouse pointer to incorporate into the encryption algorithm. Done. Exit or create another…

6. Now you’ve got a virtual encrypted drive file, you need to mount it to use it. Choose “Select File” and navigate to the location in which you created it. Select an available drive letter from the list and then hit the “Mount” button, and enter the password.

7. The virtual encrypted drive will be mounted. Go to My Computer and listed alongside all the other drives on your computer, there will be a new one listed corresponding to the drive letter you selected. Drag and drop all your sensitive data to this drive and work from it as if you would any other disk.
8. Once you’re finished working with the data, in TrueCrypt, select the mounted drive and hit “Dismount”. The drive will no longer be available and it’s now totally encrypted.

How to use it on your external hard disk & USB thumbdrive.
TrueCrypt does need not be installed to work. Just dump truecrypt.exe, truecrypt.sys, and your virtual encrypted drive onto a tumbdrive or external hard disk. On the move, just stick it in any computer, launch truecrypt.exe, and browse to your virtual encrypted volume.

How to use it on a CD.
The cool part about using a CD is you can use the autorun function to launch truecrypt.exe whenever you pop it into a CD-ROM drive (unless autorun has been disabled on the machine). To create an autorun file, open a notepad and insert these lines:

[autorun]
OPEN=truecrypt.exe

and save it as Autorun.inf.

Burn truecrypt.exe, truecrypt.sys, your virtual encrypted drive and the Autorun.inf file to your CD root. The uncool part? it’s read only (naturally being a CD-ROM).

Ghostzilla also ‘cloaks’ anytime you move your cursor outside its browsing window and won’t reappear till you move your mouse from the far left of your screen to the far right and then back again in a zig zag motion.

Ethically speaking, it ain’t right to be web surfing during work and we at spherebox don’t condone it. If you however, like me, you have a job where you’re only assigned 3-4 hours of work a day (at best), I do highly recommend it rather than stare hopelessly at your cubicle PostIt as you’re too nervous that someone might catch a glimpse of you looking up what’s hot on spherebox :P.

Screenshot (click to enlarge image) of how it looks like embedded in my MS Outlook. Here the page looks like the content one would expect in an email making me look like I’m actually working (Replying/Reading e-mail).

Interested? Download here.