<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>SteveLooi.com &#187; Security</title>
	<atom:link href="http://www.stevelooi.com/category/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.stevelooi.com</link>
	<description>Internet, Tech Tips, Reviews, and Make Money Online</description>
	<lastBuildDate>Tue, 20 Jul 2010 18:54:09 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Secure free email account to protect your privacy</title>
		<link>http://www.stevelooi.com/2009/05/14/secure-free-email-account-to-protect-your-privacy/</link>
		<comments>http://www.stevelooi.com/2009/05/14/secure-free-email-account-to-protect-your-privacy/#comments</comments>
		<pubDate>Thu, 14 May 2009 15:49:37 +0000</pubDate>
		<dc:creator>Steve Looi</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[email]]></category>
		<category><![CDATA[encryption]]></category>
		<category><![CDATA[Secure]]></category>

		<guid isPermaLink="false">http://www.stevelooi.com/?p=109</guid>
		<description><![CDATA[Hushmail provides secure free email address for everyone. It allows you to send and receive confidential email between you and the intended recipients by encrypting the email message, so that you won&#8217;t need to worry about your email being intercepted and view by any person.
Every secure free Hushmail account include these features:

Spam filtering
Virus scanning
File storage [...]]]></description>
			<content:encoded><![CDATA[<p><strong><a title="Hushmail.com" href="http://www.hushmail.com/" target="_blank">Hushmail</a></strong> provides secure free email address for everyone. It allows you to send and receive confidential email between you and the intended recipients by encrypting the email message, so that you won&#8217;t need to worry about your email being intercepted and view by any person.</p>
<p>Every secure free Hushmail account include these features:</p>
<ul>
<li>Spam filtering</li>
<li>Virus scanning</li>
<li>File storage and sharing with other Hushmail users</li>
<li>Unlimited contacts</li>
<li>POP3 access to external email accounts</li>
<li>Easy encrypted communication with contacts at any email address using Hustmail Express</li>
<li>Hush Messenger for secure instant messaging</li>
<li>Email notification</li>
<li>Read receipts, auto-responders, drafts, and templates</li>
<li>Digital signatures for email and attachments</li>
<li>End-to-end encryption for email and files</li>
<li>Full OpenPGP support with 2048 bit encryption</li>
<li>Encryption toolkit</li>
</ul>
]]></content:encoded>
			<wfw:commentRss>http://www.stevelooi.com/2009/05/14/secure-free-email-account-to-protect-your-privacy/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Managing Multiple PuTTY Instances in Tabs</title>
		<link>http://www.stevelooi.com/2009/04/13/managing-multiple-putty-instances-in-tabs/</link>
		<comments>http://www.stevelooi.com/2009/04/13/managing-multiple-putty-instances-in-tabs/#comments</comments>
		<pubDate>Mon, 13 Apr 2009 03:06:35 +0000</pubDate>
		<dc:creator>Steve Looi</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Software]]></category>
		<category><![CDATA[SSH]]></category>
		<category><![CDATA[Windows]]></category>

		<guid isPermaLink="false">http://www.stevelooi.com/?p=106</guid>
		<description><![CDATA[PuTTY is a free Telnet and SSH client for Win32 and Unix platforms. It lacks the tabbing feature, which is one of the most important missing feature of PuTTY that many users are complaining. When you create multiple PuTTY connection instances, each instance will be opened in a separate window.
PuTTY Connection Manager is a free [...]]]></description>
			<content:encoded><![CDATA[<p>PuTTY is a free Telnet and SSH client for Win32 and Unix platforms. It lacks the tabbing feature, which is one of the most important missing feature of PuTTY that many users are complaining. When you create multiple PuTTY connection instances, each instance will be opened in a separate window.</p>
<p><a title="PuTTY Connection Manager" href="http://puttycm.free.fr/" target="_self">PuTTY Connection Manager</a> is a free PuTTY Client Add-on for Windows platforms which provide a solution for managing multiple PuTTY instances by creating a tab for each PuTTY instance within the program window.</p>
<p>According to the features listed in the PuTTY Connection Manager web site, they include:</p>
<ul>
<li>Tabs and dockable windows for PuTTY instances.</li>
<li>Fully compatible with PuTTY configuration (using registry).</li>
<li>Easily customizable to optimize workspace (fullscreen, minimze to tray, add/remove toolbar, etc.).</li>
<li>Automatic login feature regardless to protocol restrictions (user keyboard simulation).</li>
<li>Post-login commands (execute any shell command when logged).</li>
<li>Connection Manager : Manage a large number of connections with specific configuration (auto-login, specific PuTTY Session, post-command, etc.).</li>
<li>Quick connect toolbar to quickly launch a PuTTY connection.</li>
<li>Import/Export whole connections informations to XML format (generate your configuration automatically from another tool and import it, or export your configuration for backup purpose).</li>
<li>Encrypted configuration database option available to store connections informations safely (external library supporting AES algorithm used with key sizes of 128, 192 and 256 bits, please refer for the legal status of encryption software in your country).</li>
<li>Standalone executable, no setup required.</li>
<li>Localizable : English (default) and French available (only when using setup version, standalone is english only).</li>
</ul>
<p>The PuTTY Connection Manager requires <a title="Microsoft .NET Framework 2.0" href="http://download.microsoft.com/download/5/6/7/567758a3-759e-473e-bf8f-52154438565a/dotnetfx.exe">Microsoft .NET Framework 2.0</a> and <a title="PuTTY Free Telnet and SSH Client" href="http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html" target="_blank">PuTTY</a> in order to run.</p>
<p>In the PuTTY Connection Manager, access the Tools &gt; Options. In the Options window, select PuTTY and browse or type the location of the PuTTY Client program in your PC.</p>
<p>Visit <a title="PuTTY Connection Manager" href="http://puttycm.free.fr/" target="_blank">PuTTY Connection Manager</a> homepage to download the software.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.stevelooi.com/2009/04/13/managing-multiple-putty-instances-in-tabs/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Facebook Privacy Glitch Revealed Private Photos</title>
		<link>http://www.stevelooi.com/2008/03/26/facebook-privacy-glitch-revealed-private-photos/</link>
		<comments>http://www.stevelooi.com/2008/03/26/facebook-privacy-glitch-revealed-private-photos/#comments</comments>
		<pubDate>Wed, 26 Mar 2008 12:12:24 +0000</pubDate>
		<dc:creator>Steve Looi</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.stevelooi.com/2008/03/26/facebook-privacy-glitch-revealed-private-photos/</guid>
		<description><![CDATA[A lapse in security for Facebook discovered by Byron Ng, a computer technician from Vancouver, Canada, allowed him to sneak through Facebook's newly improved privacy controls deployed last week. The security loophole allowed him to view private photos of celebrities, along with other access restricted photos posted by other Facebook users.]]></description>
			<content:encoded><![CDATA[<p>A lapse in security for Facebook discovered by Byron Ng, a computer technician from Vancouver, Canada, allowed him to sneak through Facebook&#8217;s newly improved privacy controls deployed last week.</p>
<p>The security loophole allowed him to view private photos of celebrities, along with other access restricted photos posted by other Facebook users.</p>
<p>The Associated Press verified Ng&#8217;s claim by accessing and viewing a private photo posted by Facebook founder Mark Zuckerberg.</p>
<p>According to a Facebook spokeperson, the security hole was fixed immediately after it was reported.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.stevelooi.com/2008/03/26/facebook-privacy-glitch-revealed-private-photos/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Streamyx Blocks Outgoing SMTP Port 25</title>
		<link>http://www.stevelooi.com/2008/03/25/streamyx-blocks-outgoing-smtp-port-25/</link>
		<comments>http://www.stevelooi.com/2008/03/25/streamyx-blocks-outgoing-smtp-port-25/#comments</comments>
		<pubDate>Mon, 24 Mar 2008 18:22:16 +0000</pubDate>
		<dc:creator>Steve Looi</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[SMTP]]></category>
		<category><![CDATA[Streamyx]]></category>

		<guid isPermaLink="false">http://www.stevelooi.com/2008/03/25/streamyx-blocks-outgoing-smtp-port-25/</guid>
		<description><![CDATA[The action taken was by blocking outgoing SMTP port 25 for all outgoing e-mails from dynamic IP addresses to non-Streamyx mail servers. In other words, if your company hosts its own mail server, the employees will not be able to send outgoing e-mails if they are connected from home to the office mail server via Streamyx.]]></description>
			<content:encoded><![CDATA[<p>Streamyx issued a <a href="http://www.streamyx.com/whats_new/whats_new.php?id=article_20080311" target="_blank">notice</a> in its web site informing its users about an anti-spam exercise to mitigate spam in its network.</p>
<p>The action taken was by blocking outgoing SMTP port 25 for all outgoing e-mails from dynamic IP addresses to non-Streamyx mail servers.</p>
<p>In other words, if your company hosts its own mail server, the employees will not be able to send outgoing e-mails if they are connected from home to the office mail server via Streamyx.</p>
<p>SMTP port 25 is a standard outgoing port for most e-mail client software such as, Outlook Express, Mozilla Thunderbird, Eudora, and etc.</p>
<p>Streamyx offered several alternative <a href="http://www.streamyx.com/whats_new/whats_new.php?id=article_20080311" target="_blank">configuration options</a>. Users may either relay their mail server to Streamyx&#8217;s SMTP or use port 587 for all outgoing e-mails.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.stevelooi.com/2008/03/25/streamyx-blocks-outgoing-smtp-port-25/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Windows Vista SP1 is Available for Download Via Windows Update</title>
		<link>http://www.stevelooi.com/2008/03/23/windows-vista-sp1-is-available-for-download-via-windows-update/</link>
		<comments>http://www.stevelooi.com/2008/03/23/windows-vista-sp1-is-available-for-download-via-windows-update/#comments</comments>
		<pubDate>Sat, 22 Mar 2008 19:18:04 +0000</pubDate>
		<dc:creator>Steve Looi</dc:creator>
				<category><![CDATA[Product Reviews]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[download]]></category>
		<category><![CDATA[hot fixes]]></category>
		<category><![CDATA[Vista]]></category>

		<guid isPermaLink="false">http://www.stevelooi.com/2008/03/23/windows-vista-sp1-is-available-for-download-via-windows-update/</guid>
		<description><![CDATA[Microsoft released the long awaited Windows Vista SP1 on 18 March 2008. The Windows Vista SP1 contains more than 300 hot fixes compiled since the launch of Vista. Windows Vista Secrets]]></description>
			<content:encoded><![CDATA[<p>Microsoft released the long awaited Windows Vista SP1 on 18 March 2008. It is available for download via Windows Update.</p>
<p>The Windows Vista SP1 contains more than 300 hot fixes compiled since the launch of Vista. These hot fixes are designed to improve the operating system&#8217;s security, speed and stability.</p>
<p align="center"><a href="http://www.amazon.com/gp/redirect.html?ie=UTF8&amp;location=http%3A%2F%2Fwww.amazon.com%2FWindows-Vista-Secrets-Brian-Livingston%2Fdp%2F0764577042%3Fie%3DUTF8%26s%3Dbooks%26qid%3D1206383428%26sr%3D1-8&amp;tag=serium-20&amp;linkCode=ur2&amp;camp=1789&amp;creative=9325" target="_blank"><img src="http://ecx.images-amazon.com/images/I/21XF4st0QeL.jpg" alt="Windows Vista Secrets" title="Windows Vista Secrets" /><br />
Windows Vista Secrets</a><img src="http://www.assoc-amazon.com/e/ir?t=serium-20&amp;l=ur2&amp;o=1" style="border: medium none  ! important; margin: 0px ! important" border="0" height="1" width="1" /></p>
]]></content:encoded>
			<wfw:commentRss>http://www.stevelooi.com/2008/03/23/windows-vista-sp1-is-available-for-download-via-windows-update/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to Tunnel VNC over SSH with PuTTY on Windows XP or Windows 2000</title>
		<link>http://www.stevelooi.com/2008/03/22/how-to-tunnel-vnc-over-ssh-with-putty-on-windows-xp-or-windows-2000/</link>
		<comments>http://www.stevelooi.com/2008/03/22/how-to-tunnel-vnc-over-ssh-with-putty-on-windows-xp-or-windows-2000/#comments</comments>
		<pubDate>Fri, 21 Mar 2008 19:00:58 +0000</pubDate>
		<dc:creator>Steve Looi</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[cygwin]]></category>
		<category><![CDATA[openssh for windows]]></category>
		<category><![CDATA[putty]]></category>
		<category><![CDATA[secure channel]]></category>
		<category><![CDATA[secure shell]]></category>
		<category><![CDATA[ssh connection]]></category>
		<category><![CDATA[virtual network]]></category>
		<category><![CDATA[vnc server]]></category>

		<guid isPermaLink="false">http://www.stevelooi.com/2008/03/22/how-to-tunnel-vnc-over-ssh-with-putty-on-windows-xp-or-windows-2000/</guid>
		<description><![CDATA[At the prompt, type ssh-host-config -y (the "-y" option automatically answers "yes" to the three questions below) If the script asks about "privilege separation", answer yes If the script asks about "create local user sshd", answer yes If the script asks about "install sshd as a service", answer yes When the script asks about "CYGWIN=", answer ntsec To start the sshd service, open a Cygwin window and type either one of the following commands: net start sshd cygrunsrv ––start sshd To stop the sshd service, open a Cygwin window and type either one of the following commands: net stop sshd cygrunsrv ––stop sshd To harmonize Windows user information with Cygwin, open a Cygwin window and type the following commands, one line at a time: mkpasswd ––local &#62;]]></description>
			<content:encoded><![CDATA[<p><strong>VNC</strong> stands for <strong>Virtual Network Computing</strong>. It is a remote control computing software that allows you to view and control another PC desktop remotely over the Internet.</p>
<p>Once the VNC session is established, all VNC data exchange between the client and the remote computers is unencrypted. A malicious user might be able to spoof your VNC data, thus allowing the person to gain access to your computer. VNC software usually contains a VNC server and a VNC viewer program.</p>
<p><strong>Secure Shell</strong> or <strong>SSH</strong> is a network protocol that allows data to be exchanged between two computers over an encrypted secure channel. <strong>PuTTY</strong> is a popular and easy to use free SSH client.</p>
<p><strong>Cygwin</strong> is an emulation of the Linux/UNIX-like environment and <strong>OpenSSH</strong> for Windows.</p>
<p>There are free software available for you to download from the Internet to tunnel VNC traffic over SSH connection.</p>
<p>You will need:</p>
<ul>
<li><strong><a href="http://www.cygwin.com/" title="Cygwin" target="_blank"> Cygwin</a></strong></li>
<li><strong><a href="http://www.realvnc.com/" title="RealVNC" target="_blank">RealVNC</a></strong></li>
<li><strong><a href="http://www.chiark.greenend.org.uk/~sgtatham/putty/" title="PuTTY" target="_blank">PuTTY</a></strong></li>
<li>TCP port 22 enabled at the remote computer</li>
</ul>
<p><strong><br />
Install Cygwin on the remote computer</strong></p>
<p>Login as Administrator.</p>
<p>Create a folder called <strong>c:\cygwin</strong></p>
<p>Download the Cygwin setup file and save it in c:\cygwin folder.</p>
<p>Double click and run the Cygwin setup file.</p>
<p>Type <strong>c:\cygwin</strong> for the &#8220;Local Package Directory&#8221;.</p>
<p>Click the little View button for &#8220;<strong>Full</strong>&#8221; view.</p>
<p>Find the package &#8220;<strong>openssh</strong>&#8220;, click on the word &#8220;Skip&#8221; so that an &#8220;X&#8221; appears in the column.</p>
<p>Find the package &#8220;<strong>tcp_wrappers</strong>&#8220;, click on the word &#8220;Skip&#8221; so that an &#8220;X&#8221; appears in the column.</p>
<p>Find the package &#8220;<strong>zlib</strong>&#8220;, click on the word &#8220;Skip&#8221; (should be selected already) so that an &#8220;X&#8221; appears in the column.</p>
<p>Click &#8220;Next&#8221; to begin installing Cygwin and SSH.</p>
<p>Right click My Computer &gt; Properties &gt; Advanced &gt; Environment Variables</p>
<p>Click the &#8220;New&#8221; button to add a new entry to System Variables:</p>
<p>Variable name: <strong>cygwin</strong><br />
Variable value: <strong>ntsec</strong></p>
<p>Click the &#8220;OK&#8221; button.</p>
<p>Right click My Computer &gt; Properties &gt; Advanced &gt; Environment Variables</p>
<p>Select the &#8220;PATH&#8221; variable and click the &#8220;Edit&#8221; button.</p>
<p>Append <strong>;c:\cygwin\bin</strong> to the end of the Variable value.</p>
<p>Click the &#8220;OK&#8221; button.</p>
<p>Double click the Cygwin icon to open a cygwin window.</p>
<p>At the prompt, type <strong>ssh-host-config -y</strong> (the &#8220;-y&#8221; option automatically answers &#8220;yes&#8221; to the three questions below)</p>
<p>If the script asks about &#8220;privilege separation&#8221;, answer <strong>yes</strong><br />
If the script asks about &#8220;create local user sshd&#8221;, answer <strong>yes</strong><br />
If the script asks about &#8220;install sshd as a service&#8221;, answer <strong>yes</strong></p>
<p>When the script asks about &#8220;CYGWIN=&#8221;, answer <strong>ntsec</strong></p>
<p>To start the sshd service, open a Cygwin window and type either one of the following commands:</p>
<p><strong>net start sshd</strong><br />
<strong>cygrunsrv ––start sshd</strong></p>
<p>To stop the sshd service, open a Cygwin window and type either one of the following commands:</p>
<p><strong>net stop sshd</strong><br />
<strong>cygrunsrv ––stop sshd</strong></p>
<p>To harmonize Windows user information with Cygwin, open a Cygwin window and type the following commands, one line at a time:</p>
<p><strong>mkpasswd ––local &gt; /etc/passwd</strong><br />
<strong>mkgroup ––local &gt; /etc/group</strong></p>
<p>To test your sshd installation, open a Cygwin window and type the following command:</p>
<p><strong>whoami</strong></p>
<p>The current username should be displayed.</p>
<p><strong>ls -h /cygdrive/c</strong></p>
<p>You should see a directory listing.</p>
<p>Type exit at the command prompt to exit the Cygwin SSH session.<br />
<strong><br />
</strong></p>
<p><strong>Install the VNC Server program</strong></p>
<p>Download the RealVNC setup file  on the computer to be controlled remotely.</p>
<p>Double click and run the RealVNC setup file.</p>
<p>Select the checkbox for VNC Server.</p>
<p>Click &#8220;Next&#8221; to begin the installation.</p>
<p>Type a VNC password when asked so that you will be prompted to enter a password every time you establish a VNC session.<br />
<strong><br />
</strong></p>
<p><strong>Install the VNC Viewer program</strong></p>
<p>Double click and run the RealVNC setup file  on the computer you are using to control the remote computer desktop.</p>
<p>Select the checkbox for VNC Viewer.</p>
<p>Click &#8220;Next&#8221; to begin the installation.<br />
<strong><br />
</strong></p>
<p><strong>Configure and run the PuTTY program</strong></p>
<p>Double click and run the PuTTY program file on the computer you are using to control the remote computer desktop.</p>
<p>At the &#8220;Session&#8221; category in the tree menu, Type the Host Name or IP Address of the remote computer.</p>
<p>The Port should be default to 22 and the Connection type should be default to SSH.</p>
<p>Click the &#8220;SSH&#8221; category to expand the tree menu, and select &#8220;Tunnels&#8221;.</p>
<p>Add these entry below the &#8220;Add new forwarded port&#8221;:</p>
<p>Source port: <strong>5900</strong><br />
Destination: <strong>127.0.0.1:5900</strong></p>
<p>Select the default values as &#8220;<strong>Local</strong>&#8221; and &#8220;<strong>Auto</strong>&#8220;.</p>
<p>Click the &#8220;Session&#8221; category in the tree menu.</p>
<p>Type a name at the &#8220;Saved Sessions&#8221; and click the &#8220;Save&#8221; button.</p>
<p>Click the &#8220;Open&#8221; button to establish a new SSH session to the remote computer.</p>
<p>Type the Windows username and password to login.</p>
<p>Leave the PuTTY program window open.</p>
<p><strong><br />
Run the VNC Viewer program</strong></p>
<p>Double click and run the VNC Viewer program.</p>
<p>Type <strong>localhost</strong> or <strong>127.0.0.1</strong> and click &#8220;OK&#8221; to connect.</p>
<p>The VNC session should be tunelling through the SSH connection by now.</p>
<p>You can verify it by closing the SSH session. The VNC connection will be disconnected immediately too.</p>
<p align="center"><a href="http://www.amazon.com/gp/redirect.html?ie=UTF8&amp;location=http%3A%2F%2Fwww.amazon.com%2FSSH-Secure-Shell-Definitive-Guide%2Fdp%2F0596008953%3Fie%3DUTF8%26s%3Dbooks%26qid%3D1206384131%26sr%3D1-1&amp;tag=serium-20&amp;linkCode=ur2&amp;camp=1789&amp;creative=9325" target="_blank"><img src="http://ecx.images-amazon.com/images/I/2148K7nCn0L.jpg" alt="SSH, The Secure Shell" title="SSH, The Secure Shell"/><br />
SSH, The Secure Shell</a><img src="http://www.assoc-amazon.com/e/ir?t=serium-20&amp;l=ur2&amp;o=1" style="border: medium none  ! important; margin: 0px ! important" border="0" height="1" width="1" /></p>
]]></content:encoded>
			<wfw:commentRss>http://www.stevelooi.com/2008/03/22/how-to-tunnel-vnc-over-ssh-with-putty-on-windows-xp-or-windows-2000/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
	</channel>
</rss>
