Email Part 2 (Part 3): Ensuring Privacy, Integrity and Authenticity

In Part 2 (which is actually Part 3 just to be confusing) we look at how to secure the 40-year-old email standard and how to secure the three main security problems associated with the world's favourite alternative to an envelope and stamp or facsimilie machine and screaming phone tones.

Email - Your Biggest Security Vulnerability

Email.  Most probably your biggest security vulnerability that you didn't know about.

Email is ancient.  The core of how email works and how your email is transported from you to it's recipient was designed nearly 40 years ago, in 1982 (SMTP - RFC821).  It relies on your email being transported around in plain text from server to server in a manner you have no control over.

Guide To GPG And Other New Pages!

With Security Saturday and Shutdown Sunday appearing yet again, I thought that any updates or new pages or announcements or any of that malarkey can just go on here.  Just one post for all the pages, not a new post per page, d'ja'ge'me, yeah?

So, check out my Shit Guide To GPG, now a live page floating around like some shitty floater...

Public And Shared Keys Page

I've added a static page to this where public PGP keys, public SSH keys and all the like can get added in one ungainly, unordered list.

NFC Tags

NFC tags. They're kinda cool for about 5 minutes... About the only useful things I found are detailed below.  This post is because I've thought of a new one to add!

Fact-Up Friday:You've Been Hacked - No Joke

Your computer/phone/tablet has been hacked.  All of the data on it is available to the hackers, they can listen to your calls, read your texts, emails, see your web browser history, take control of your camera/microphone... This is not a "what if" scenario - this actually applies to YOU.

Techie Thursday: SSH Tunnelling

One of SSH's coolest (IMHO) features is it's ability to transparently tunnel TCP packets.  In fact, it can tunnel IP datagrams over TCP, but that's one for another day.  This looks at SSH's TCP port forwarding ability, and how you can use it to set up secure, fully encrypted point-to-point links between machines (or entire networks) in physically different locations on different networks.