Reasons for Full Disk Encryption

To those who are unfamiliar with the concept of full disk encryption it is very simple, normal your computer or mobile devices will store data on a HDD (Hard Disk Drive) without the requirement for a password or any verification to access it bar maybe a password to log into the machine. And this is all fine and well in a lot of cases, your average user might simply use there laptop for basic web browsing or to use services such as Netflix or Gmail.

But for some users personal or sensitive information might be stored on the computer, meaning that if the devise was to be stolen then all of this information could be accessed and could potently have massive consequences. But by using full disk encryption it makes it almost impossible to gain access to the drive and therefore the information stored on it. The best part is you don’t need to be “tech-savy” or a “computer genius” to achieve this level of protection. And it is also a huge amount easier to achieve than it might sound.

Firstly there are a number off different methods to protect your computer with full disk encryption, this could be in the form of a downloaded application but most operating systems these days also allow the user the ability to use full disk encryptions.

Listed below are a few of the easiest options to secure your PC with full disk encryption

Bit Locker

Bit Locker is Microsoft Windows answer to full disk encryption, and was introduce with Windows Vista, but only on the higher tier packages such as professional and business. This could be a slight restriction to some users who have the home version of Windows.

But much it is a very effective and smooth process to encrypt your disk using Bit Locker, and with it being built it it is also very easy to set up and use. Unlike TrueCrypt this is ran through Microsoft, meaning constant updates and improvements to security and as a result making your data as safe as it can be.

TrueCrypt

Before Bit Locker was around full disk encryption was hard to come by, but there was an open source tool that gave users this ability. And this was TrueCrypt a very easy to use and secure full disk encryption software. That has unfortunately been unsupported since 2014. However your are still able to downloaded it, and even though it states on the website that you should migrate to Bit Locker I personally feel that for your average user that wants a little extra security it will still do an effective job. Largely due to the fact that if your devise was to get stolen, unless the thief was very technically able it would be incredibly challenging for anyone bar an expert to utilize the security vulnerabilities said to be within TrueCrypt.

TrueCrypt Disclaimer
Source – http://truecrypt.sourceforge.net/

 

Ubuntu Home Folder

If you are a Linux user then Ubuntu has you covered on the encrypted folder front, during the install process for Ubuntu you are given the option to password protect your home folder. If you opt to set up a password your home folder will then be encrypted requiring a password to access once logged into the system. It is really nice to see it in the installation stage as it means once your system has been installed everything is set up for you and you will not have to go and set it up after. Although if you use Ubuntu and didn’t do it during the start up, don’t worry about it because you can do it after while usng the system. There are guides to this on the official Ubuntu website.

 

In some cases there are different methods to unlock an encrypted drive, this could be done in a few different ways. One of the more popular is using a UBS drive as a decryption key. Meaning to access the encrypted drive the user will need to have access to the specific USB drive. This is very similar to using a key card to access the encrypted drive. In my opinion it is also a little bit more user friendly as you will not have to keep typing out what should hopefully be a lengthy and complicated password.

And one of my personal favourites is the use of biometrics such as a finger print scanner. These can be purchased online and with a little but of work in some cases, allows the user to have a scanner on the desk, and once a finger print is detected open the encrypted drive.

There are also other methods to be able to add secure sections to your files system, one I have a lot of experience with is use BitDefender. The BitDefender has an option to protect certain folders, Essentially setting up an encrypted location that requires a password to access, although it is not quite full disk encryption its a very easy and manageable way to secure some of your files. It also requires the user to select how much space is going to be need meaning that the area that you secure could be a large as you need.

 

How to Setup an Ethical Hacking Lab

I have recently been setting up a Virtual Lab to use with Kali Linux, to safely practice some pen-testing. And just messing around with some stuff, but the first thing I needed to do before I started was to create a safe environment for myself to practice in. I did this by using VMware

VMware is a virtual machine package allowing you to run virtual machines on your main devices, this can be used for a number of different things. Such as setting up a forensics test environment to discover how some application change the machines as they are used. Or to practice ethical hacking in a safe and secure environment. This can be important because unless you had permission to practice on a real network you would be in breach of a number off different laws depending on the country your in.

This means without having access to a functional lab you’d struggle to either practice away from your studies or to even get started without the worry of getting yourself into trouble. Due to these reasons I went about setting my self up a little lab using VMware. This was very straight forward and simple to-do. And now means I can practice to my hearts content without the risk of breaking any laws.And here is how I did it.

VMWare Downlaod Page
First thing you will need to do is go to the VMware website, and download the VMware Workstation Player (And don’t worry its free for personal use)
VMware Welcome Screen
Once you have downloaded and installed VMware, you will be greeted by this window. From here we are going to select “Create a New Virtual Machine”
Create VM 1
Once you have selected to create a new virtual machine, you will have to select the ISO you wish to install (I will leave a list of Linux ISO below)
Create VM 3
Once you have selected your operating system you will be asked to enter information about the user
Create VM 4
The next step is to decided where you want to save your VM files and to name the VM if you have multiple VM’s of the same operating system this is usefulto manage and keep track of them.
Create VM 5
You will then be asked to select how much storage you want the virtual machine to have, I usually leave it around the 20GB mark but you can do what ever best suites your needs. As I only use mine for testing purpose and never store any data on them.
Create VM 6
This is the final stage before powering on your VM, and is also the stage you are give the option to assign how much hardware the VM will receive.
Create VM 7
Once you have decided how many cores and how much ram your VM is going to require you need to go down to the networking option and select Host-Only. This means that you will only be able to communicate with machines on the same virtual network as yourself.
Create VM 8
And finally you should be able to power on your virtual machine and install the operating system. Once this machine boots up you will be in your own virtual network and can practice your hacking in a safe and secure environment.

 

So if you follow all of the steps above you will be able to repeat this step to install OS such as Kali Linux, this is my go to operating system for practicing ethical hacking as it has all the tools you could need and is used within industry meaning you will have access to tools that are used by professionals.

I found it useful to play around with some older operating systems to practice on first, this tended to be Windows XP or an older version of Ubuntu. This is due to the security features on Windows 10 for example and more advance making it more of a struggle to practice. I also found the easiest way to get a Windows XP key was to have a look around the house and try and find an old laptop that ran windows XP and use the serial off that. But if you don’t have any laying round the house you can buy them on eBay for about £30.

 

Linux ISO Downloads

Can you still use a VPN with Netflix?

I remember about 5-6 years ago getting Netflix for the first time, and loved it. But i always wanted more and this was in the form of accessing the US Netflix. Due to Sky having a huge amount of the rights to shows over here in the UK some of the good stuff that the US Netflix has is limited to the US.

My first dive into this was using a services called unblock US, this was a simple services that allowed me to change my DNS settings to access the US Netflix this system was great it worked across my iPad 1 and my Xbox 360. But the issues now is that Netflix have cottoned onto the fact that people are using services like this to access Netflix and they have began to shut them down.

After doing some research into this it turn out that to do this the basically work out if the IP your connecting from is related to a VPN or DNS services. This greets  you with a message on Netflix that basically says we know you are using a VPN and if you wish to use our service please connection from it to continue. So anyway I ended up using Express VPN for a while due to my suspicions on using public WiFi and stuff. But then I released that certain connection through that VPN offered me access to the US Netflix. And they then blocked these, so I just by chance ended up using a different VPN services because they offered a good deal at the time and I just stumbled upon the fact that I could again watch the US Netflix again.

NSA GitHub – Are they really being transparent

Earlier this week it came to light that the NSA (National Security Agency) had created a GitHub account, and realises some programs on the platform.  This bring up a number of questions, firstly are they really trying to be that transparent or is it a novel way to try and win back the trust of the public.
Thankfully the source code for all of the application is available so it is possible to see what is going on within them, as a major concern of mine would be the potential back doors or snooping application like this could do to e user if they where not able to actually see what was going on…

But this does still beg the question as to why they have realised it, now it is not uncommon for application and other such items to trickle down the pipe line to the more “consumer” market eventually but after the vault 7 leaks a few month ago it is possible to see that they have so many more application with much more malicious uses than the few that eye have realised for the public. So there is the potential they they have realsed stuff that is out dated to them or that they don’t feel will be to compromising to all if their activitys.