Feb 12
20

Keep It In The Cloud Or Loss It – How Important Is Your Data?

 

Would you rather have your documents stored in the cloud than loss them to theft or hard disk crashing? I once lost a laptop to theft, but fortunately, i had already stored 90% of my files online using Dropbox. There are various cloud storage services nowadays, and most of them offer certain disk space for free. I recently came across another cloud storage service called SpiderOaks, with more features than other storage services I had ever used.

Whether you need to access a document you have stored on a remote server, synchronize data between a Mac, Windows or Linux device, share important business documents with your clients, or just rest easy knowing all of your data is safely, securely, and automatically backed up – SpiderOak’s free online backup, online sync and online sharing solution can handle all your needs!

 

More Than Online Backup

  • Automatic backup of any additions or changes to your backup set.
  • Securely synchronize folders across multiple computers and operating systems using our free online sync.
  • Discretely share selected folders with friends, family, colleagues, and clients.
  • Easily access all of your data from any device within your SpiderOak network or on the web
  • Privately store data on your SpiderOak network.
  • Backup desktops, laptops, servers and network drives with one online service.

10-15 Times Faster Data Upload

  • Greatly reduce backup & sync time through comprehensive compression and advanced de-duplication (saving you time).

Mac, Windows & Linux Compatible Online Backup and Sync

  • Complete cross-platform support – one consolidated online backup account.
  • Backup data from different devices, external hard-drives, network drives, USB keys, and other forms of removable media in your SpiderOak network.

Consolidated Online Storage

  • Centralize ALL your data across all platforms and devices.
  • Simple interface allows for access to all every file stored within your SpiderOak network.
  • No more need to pay for and manage several online backup accounts.

Save all your Historical Versions

  • Storage of complete version history of every file – accessible by date-stamp – just in case you accidentally save over a file or would like to go back in time.
  • Deleted files stored in the ‘Recycle’ bin just in case an accidental deletion occurs.
  • Due to de-duplication, the work of retaining historical versions is done quickly and effectively.

Complete Privacy Guaranteed

  • SpiderOak never stores or knows a user’s password or the plaintext encryption keys which means not even SpiderOak employees can access the data.
  • The zero-knowledge privacy approach means SpiderOak can never betray the trust of the users.

Fault-Tolerant Design

  • SpiderOak online backup always protects your data even if your network connection times out or the power goes down during a backup.
  • All infrastructure components designed and maintained in-house – eliminating vulnerabilities caused by 3rd party involvement.
  • Multiple redundancy strategies which include point-in-time recover to protect against human error or accidental deletions.
  • Constant automated stress testing and verification system that continually monitors production server operation to ensure immediate detection of possible malfunctions.
Tags: , ,
Posted in INTERNET TOOLS by admin. 5 Comments

Feb 12
17

One Easy Way to Keep Neighbors From Stealing Your Wi-Fi

Give your network a scary name!

This might sound so simple but it could be effective in keeping off neighbors from stealing your pricey connection, especially when you don’t want to go into the hassle of using WPA stuffs or long string of numbers as password that you could easily forget.

On the other hand, you could use both the password and some of the unappealing SSID below.

Specifically, by choosing an unappealing or intimidating SSID (network name), you may succeed at  discouraging non-tech-savvy neighbors (which, no offense, folks, is most of them) to steer clear. Try some of these and think of others you can use.

1.  c:\virus.exe.

2. Hacker

3. Spammer 

4. iwillhackyou

5. Fraud

Actually, think I’ll go with this: onlinetheft. That should be enough to keep the pilferers at bay.

Okay, maybe this is a bit silly. The smarter move is simply to not broadcast the SSID at all, meaning your network will stay invisible to outsiders while remaining available to you.

Tags: ,
Posted in IDEA QUEST by admin. 12 Comments

Feb 12
16

The Dos And Donts of WiFi Security

WiFi

[img src=http://www.ideapoolonline.com/wp-content/flagallery/wifi/thumbs/thumbs_key.jpg]The Dos and Donts of WiFi Security
Wi-Fi is inherently susceptible to hacking and eavesdropping, but it can be secure if you use the right security measures. Unfortunately, the Web is full of outdated advice and myths. But here are some do's and don'ts of Wi-Fi security, addressing some of these myths. [img src=http://www.ideapoolonline.com/wp-content/flagallery/wifi/thumbs/thumbs_wep.jpg]1. Don't use WEP
WEP (wired equivalent privacy) security is long dead. Its underlying encryption can be broken quickly and easily by the most inexperienced of hackers. Thus you shouldn't use WEP at all. If you are, immediately upgrade to WPA2 (Wi-Fi protected access) with 802.1X authentication — 802.11i. If you have legacy clients or access points that don't support WPA2, try firmware upgrades or simply replace the equipment. [img src=http://www.ideapoolonline.com/wp-content/flagallery/wifi/thumbs/thumbs_wpa.jpg]2. Don't use WPA/WPA2-PSK
The pre-shared key (PSK) mode of WPA and WPA2 security isn't secure for business or enterprise environments. When using this mode, the same pre-shared key must be entered into each client. Thus the PSK would need to be changed each time an employee leaves and when a client is lost or stolen — unpractical for most environments.[img src=http://www.ideapoolonline.com/wp-content/flagallery/wifi/thumbs/thumbs_802.jpg]3. Do implement 802.11i
The EAP (extensible authentication protocol) mode of WPA and WPA2 security uses 802.1X authentication instead of PSKs, providing the ability to offer each user or client their own login credentials: username and password and/or a digital certificate. The actual encryption keys are regularly changed and exchanged silently in the background. Thus to change or revoke user access all you have to do is modify the login credentials on a central server, rather than having change the PSK on each client. The unique per-session keys also prevent users from eavesdropping on each other's traffic — which is now easy with tools like the Firefox add-on Firesheep and the Android app DroidSheep. To enable the 802.1X authentication, you need to have a RADIUS/AAA server. If you're running Windows Server 2008 and later, consider using the Network Policy Server (NPS), or the Internet Authenticate Service (IAS) of earlier server versions. If you aren't running a Windows Server, consider the open source FreeRADIUS server. [img src=http://www.ideapoolonline.com/wp-content/flagallery/wifi/thumbs/thumbs_quick1x.jpg]4. Do secure 802.1X client settings
The EAP mode of WPA/WPA2 is still vulnerable to man-in-the-middle attacks. However, you can help prevent these attacks by securing the EAP settings of the client. For instance, in the EAP settings of Windows you can enable server certificate validation by selecting the CA certificate, specify the server address, and disable it from prompting users to trust new servers or CA certificates. You can also push these 802.1X settings to domain-joined clients via Group Policy or use a third-party solution, such as Avenda’s Quick1X. [img src=http://www.ideapoolonline.com/wp-content/flagallery/wifi/thumbs/thumbs_ids.jpg]5. Do use a wireless intrusion prevention system
There's more to Wi-Fi security than combating those directly trying to gain access to the network. For instance, hackers could setup rogue access points or perform denial of service attacks. To help detect and combat these, you should implement a wireless intrusion prevention system (WIPS). The design and approaches of WIPSs vary among vendors, but generally they monitor the airwaves looking for, alerting you to, and possibly stopping rogue APs or malicious activity. There are many commercial vendors offering WIPS solutions, such as AirMagnet and AirTight Neworks. There are also open source options, such as Snort. [img src=http://www.ideapoolonline.com/wp-content/flagallery/wifi/thumbs/thumbs_nap.jpg]6. Do deploy NAP or NAC
In addition to 802.11i and a WIPS, you should consider deploying a Network Access Protection (NAP) or network access control (NAC) solution. These can provide additional control over network access, based on client identity and compliance with defined policies. They can also include functionality to isolate problematic clients and remediation to get clients back within compliance. Some NAC solutions may also include network intrusion prevention and detection functionality, but you'd want to make sure it also specifically provides wireless protection. If you're running Windows Server 2008 or later and Windows Vista or later for the clients, you can use Microsoft's NAP functionality. Otherwise, you may consider third-party solutions, such as the open source PacketFence. [img src=http://www.ideapoolonline.com/wp-content/flagallery/wifi/thumbs/thumbs_ssid.jpg]7. Don't trust hidden SSIDs
One myth of wireless security is that disabling the SSID broadcasting of APs will hide your network, or at least the SSID, making it harder for hackers. However, this only removes the SSID from the AP beacons. It's still contained in the 802.11 association request, and in certain instances, the probe request and response packets as well. Thus an eavesdropper can discover a "hidden" SSID fairly quickly — especially on a busy network — with a legitimate wireless analyzer. Some might argue disabling SSID broadcasting still provides another layer of security, but also remember it can have a negative impact on the network configuration and performance. You’d have to manually input the SSID into clients, further complicating client configuration. It would also cause an increase in probe request and response packets, decreasing available bandwidth. [img src=http://www.ideapoolonline.com/wp-content/flagallery/wifi/thumbs/thumbs_mac.jpg]8. Don't trust MAC address filtering
Another myth of wireless security is that enabling MAC address filtering adds another layer of security, controlling which clients can connect to the network. This has some truth, but remember that it's very easy for eavesdroppers to monitor the network for authorized MAC addresses and then change their computer's MAC address. Thus you shouldn't implement MAC filtering thinking it will do much for security, but maybe as a way to loosely control which computers and devices end-users bring onto the network. But also consider the management nightmare you might face to keep the MAC list up-to-date. [img src=http://www.ideapoolonline.com/wp-content/flagallery/wifi/thumbs/thumbs_netsh.jpg]9a. Do limit SSIDs users can connect to
Many network administrators overlook one simple but potentially dangerous security risk: users knowingly or unknowingly connecting to a neighboring or unauthorized wireless network, opening up their computer to possible intrusion. However, filtering the SSIDs is one way to help prevent this. In Windows Vista and later, for example, you can use the netsh wlan commands to add filters to those SSIDs users can see and connect to. For desktops, you could deny all SSIDs except those of your wireless network. For laptops, you could just deny the SSIDs of neighboring networks, enabling them to still connect to hotspots and their home network.[img src=http://www.ideapoolonline.com/wp-content/flagallery/wifi/thumbs/thumbs_netsh2_0.jpg]9b. Sample netsh command usage
[img src=http://www.ideapoolonline.com/wp-content/flagallery/wifi/thumbs/thumbs_physical.jpg]10. Do physically secure network components
Remember, computer security isn't just about the latest technology and encryption. Physically securing your network components can be just as important. Make sure APs are placed out of reach, such as above a false ceiling or even consider mounting APs in a secure location and then run an antenna to an optimum spot. If not secured, someone could easily come by and reset an AP to factory defaults to open access.[img src=http://www.ideapoolonline.com/wp-content/flagallery/wifi/thumbs/thumbs_mobileclient.jpg]11. Don't forget about protecting mobile clients
Your Wi-Fi security concerns shouldn’t stop at your network. Users with smartphones, laptops, and tablets may be protected onsite, but what about when they connect to Wi-Fi hotspots or to their wireless router at home? You should try to ensure their other Wi-Fi connections are secure as well, to prevent intrusions and eavesdropping. Unfortunately, it isn’t easy to ensure outside Wi-Fi connections are secure. It takes a combination of providing and recommending solutions and educating users on the Wi-Fi security risks and prevention measures. First, all laptops and netbooks should have a personal firewall. Next, you need to make sure the user’s Internet traffic is encrypted from local eavesdroppers while on other networks by providing VPN access to your network. If you don't want to use in-house VPN for this, consider outsourced services such as Hotspot Shield or Witopia. For iOS (iPhone, iPad, and iPod Touch) and Android devices, you can use their native VPN client. However, for BlackBerry and Windows Phone 7 devices, you must have a messaging server setup and configured with the device in order to use their VPN client.
Tags: ,
Posted in HANDS-ON by admin. 20 Comments

Older posts