PaulSpoerry.com

Mostly via How-To Geek

There has been a lot of attention in the news lately about email passwords being compromised. Today we take a look at using KeePass to secure your passwords in an encrypted database so no one can get a hold of them.

KeePass

For this article we are using KeePass 2.09 but you can still download the Classic Edition as well, which you may want to do so you can use certain plugins. Installation is straight forward and after installing KeePass, the first thing is to create a new password database by clicking on File \ New.

You will need to come up with a Master Password which is the only one you will need to remember moving forward. Make sure and pick a strong password with several characters, symbols, and numbers. It can be an entire phrase, sentence, or whatever you want it to be with virtually any characters you want.

Alternatively you can use a Key File which a master password in a file. This makes it so you don’t have to remember a long Master Password, but if it gets lost and not backed up you’re out of luck. Also, you want to keep the file in a secret location other than your local hard drive, malware attacks can find it if it’s openly available on your hard drive.

Read the rest of this entry »

KeePass is a free open source password manager, which helps you to manage your passwords in a secure way. You can put all your passwords in one database, which is locked with one master key or a key file. So you only have to remember one single master password or select the key file to unlock the whole database. The databases are encrypted using the best and most secure encryption algorithms currently known (AES and Twofish).

Keepass comes in a portable version, perfect for keeping on a USB thumbdrive. The password database consists of only one file that can be transferred from one computer to another easily.

Keepass is open source and totally free (released under the GPL).  Version 2.x (the latest) runs on Windows 98, 98SE, ME, 2000, XP, 2003, Vista, Mono (Linux, Mac OS X, BSD, …), the only requirement being that you have Microsoft .NET Framework ? 2.0 or Mono ? 2.0.1. It allows for exporting to XML, HTML, CSV, KDB3, XSL-Transformed, and importing from more than 25 different formats. KeePass 2.x already has built-in support for file synchronization and because it has a plugin architecture which allows others to extend the application you can also download a plugin to synchronize with online storage providers!

KeePass supports the Advanced Encryption Standard (AES, Rijndael) and the Twofish algorithms to encrypt its password databases, this is the same type of encryption used by banks and the government, so you know your data is safe.

Grab a copy of Keepass from keepass.info.

Microsoft will issue an emergency security patch Wednesday for all versions of Internet Explorer. The patch is considered a critical fix for the security flaw currently plaguing the IE browser. So far, more than 2 million computers are believed to have been infected.

The flaw can be used to let attackers steal personal data such as passwords if a user visits a compromised Web site, of which at least 10,000 are thought to already exist. Thus far, the vulnerability has been used primarily for grabbing gaming passwords for black market sales. The hole could, however, potentially also be used to steal more sensitive information such as banking passwords and other private information. YIKES!

Microsoft’s emergency security patch will become available Wednesday at 1 p.m. EST at the Microsoft Update site as well as at the Microsoft Download Center. All users of IE5, 6, and 7 are advised to install it. A separate patch is expected to be made available for users of IE8 Beta 2. Expect to see far more detail by midday Wednesday when Microsoft officially issues its security bulletin.

Course… you could always just run FireFox or Chrome.   ;O)

Image via Wikipedia

To view the passwords associated with any site, go to the log-in page and right-click anywhere on the page. Select View Page Info, and then the Security tab. Click View Saved Passwords. Another window will pop up showing the usernames associated with that site. Click Show Passwords to see the passwords for each username.

If you want to view all of your saved usernames and passwords, open Options under the Tools menu and select the Security tab. Click Saved Passwords to open a list of every site you’ve ever saved a password for. Again, click View Passwords and the list will display all of your passwords. You can’t print this list, but you can just as easily take screenshots if you want to print out your passwords for safekeeping. Isn’t this a huge security hole?, you may ask. Why yes, it is. Knowing how easy it is for anyone with access to your PC to view all your passwords, maybe you’d like to password-protect your passwords. In the Options | Security tab, click Use a master password and enter a password. Now this password will have to be entered any time you or anyone else tries to view saved passwords. You’ll be asked to enter your master password every time you open Firefox; without it, Firefox won’t automatically enter saved passwords for you. Make sure you don’t forget this one!

Darknet has released it’s list for the Top 15 Security/Hacking Tools and Utilities. Many of these I’ve seen before and should be familiar to a lot of people, but there may be a few nuggets you haven’t seen before.

Topic include network scanning, wireless security, password cracking, etc. It’s really a great list so check’em out.

Read the rest of this entry »